Hi folks,
i have installed my openldap servers. I would like to replace the defaults olc access for my own preferences. How could i delete de installation default and replace by mine.
The file is : /etc/ldap/slapd.d/cn=config/olcDatabase={1}mdb.ldif Only the relevant part(s) :
olcAccess: {0}to attrs=userPassword by self write by anonymous auth by * none olcAccess: {1}to attrs=shadowLastChange by self write by * read olcAccess: {2}to * by * read
How to delete this and load my own access ?
Thanks a lot
Hi,
create an appropriate LDIF file and apply with ldapmodify.
Alternatively use ldapvi to access cn=config and make the changes inside your preferred editor.
Regards,
Uwe
Am 21.08.26 um 19:15 schrieb Gustavo Rios:
Hi folks,
i have installed my openldap servers. I would like to replace the defaults olc access for my own preferences. How could i delete de installation default and replace by mine.
The file is : /etc/ldap/slapd.d/cn=config/olcDatabase={1}mdb.ldif Only the relevant part(s) :
olcAccess: {0}to attrs=userPassword by self write by anonymous auth by * none olcAccess: {1}to attrs=shadowLastChange by self write by * read olcAccess: {2}to * by * read
How to delete this and load my own access ?
Thanks a lot
-- In software systems the price of reliability is the pursuit of the utmost simplicity. It is a price which the very rich find most hard to pay.
Thanks a lot. May you provide a simple ldiff to perform this operation ?
[]s
Em sex., 21 de ago. de 2026 às 15:26, Uwe Sauter uwe.sauter.de@gmail.com escreveu:
Hi,
create an appropriate LDIF file and apply with ldapmodify.
Alternatively use ldapvi to access cn=config and make the changes inside your preferred editor.
Regards,
UweAm 21.08.26 um 19:15 schrieb Gustavo Rios:
Hi folks,
i have installed my openldap servers. I would like to replace the
defaults olc access for my own
preferences. How could i delete de installation default and replace by
mine.
The file is : /etc/ldap/slapd.d/cn=config/olcDatabase={1}mdb.ldif Only the relevant part(s) :
olcAccess: {0}to attrs=userPassword by self write by anonymous auth by *
none
olcAccess: {1}to attrs=shadowLastChange by self write by * read olcAccess: {2}to * by * read
How to delete this and load my own access ?
Thanks a lot
-- In software systems the price of reliability is the pursuit of the
utmost simplicity. It is a price
which the very rich find most hard to pay.
I'd recommend you get familiar with the LDIF file format, e.g. from https://www.zytrax.com/books/ldap/ch8/
As I have no idea what ACLs you'd like to install I cannot help.
But Zytrax also has a section on ACLs, so this might be enough? https://www.zytrax.com/books/ldap/ch6/slapd-config.html#use-security
Regards,
Uwe
Am 21.08.26 um 20:45 schrieb Gustavo Rios:
Thanks a lot. May you provide a simple ldiff to perform this operation ?
[]s
Em sex., 21 de ago. de 2026 às 15:26, Uwe Sauter <uwe.sauter.de@gmail.com mailto:uwe.sauter.de@gmail.com> escreveu:
Hi, create an appropriate LDIF file and apply with ldapmodify. Alternatively use ldapvi to access cn=config and make the changes inside your preferred editor. Regards, Uwe Am 21.08.26 um 19:15 schrieb Gustavo Rios: > Hi folks, > > i have installed my openldap servers. I would like to replace the defaults olc access for my own > preferences. How could i delete de installation default and replace by mine. > > The file is : /etc/ldap/slapd.d/cn=config/olcDatabase\=\{1\}mdb.ldif > Only the relevant part(s) : > > olcAccess: {0}to attrs=userPassword by self write by anonymous auth by * none > olcAccess: {1}to attrs=shadowLastChange by self write by * read > olcAccess: {2}to * by * read > > How to delete this and load my own access ? > > Thanks a lot > > > -- > In software systems the price of reliability is the pursuit of the utmost simplicity. It is a price > which the very rich find most hard to pay.-- In software systems the price of reliability is the pursuit of the utmost simplicity. It is a price which the very rich find most hard to pay.
openldap-technical@openldap.org
-
Gustavo Rios -
Uwe Sauter