On 08/04/2011 15:34, George Mamalakis wrote:

Hello everybody,

Is there a way to achieve what the subject says? For example, we can imagine users like:

uid=user,ou=people,dc=example,dc=com

And the group that I wish the users should be able to join using ldapmodify is:

cn=group,dc=example,dc=com.

What I wish to achieve is to let a user write in this dn, only the memberOf attribute, by containing only their specific dn. Moreover, the user will have to be able to remove this entry from this group if they wish, using ldapmodify again.

Thank you very much for your help in advance,

mamalos

Found it guys,

sorry for the disturbance, it's located in openldap's documentation, at the end of paragraph: http://www.openldap.org/doc/admin24/access-control.html#Access%20Control%20E...

Thanks again for your time,