Friedrich Locke wrote:

I am planing using openldap to fetch user/group information. Below my main tree there will be ou=people and ou=group, and below those the regular user or group information.

It happens that a program (ypserv) will fetch information from tree binding as cn=ypserv just below my main tree. This binding should be authenticated, so what should cn=ypserv attributes be?

Probably use applicationProcess and simpleSecurityObject classes.

Am Wed, 29 Jun 2011 19:44:41 -0300 schrieb Friedrich Locke friedrich.locke@gmail.com:

I am planing using openldap to fetch user/group information. Below my main tree there will be ou=people and ou=group, and below those the regular user or group information.

It happens that a program (ypserv) will fetch information from tree binding as cn=ypserv just below my main tree. This binding should be authenticated, so what should cn=ypserv attributes be? What about access rules for it ?

Thanks a lot for your time and cooperation.

object class organizationalRole is a structural objectclass and only requires cn, while object class simpleSecurityObject is auxiliary and only provides userPassword.

-Dieter