Attachment 7300 Details for Bug 39967 – patch

[patch] patch

39967.patch (text/plain), 2.49 KB, created by Florian Best on 2015-11-16 13:09:46 CET

(hide)

Description:

Filename:

MIME Type:

Creator: Florian Best

Created: 2015-11-16 13:09:46 CET

Size: 2.49 KB

patch

obsolete

>diff --git a/ucs-school-ldap-acls-master/conffiles/etc/ldap/slapd.conf.d/65ucsschool b/ucs-school-ldap-acls-master/conffiles/etc/ldap/slapd.conf.d/65ucsschool
>index 54b469e..bf3c59a 100644
>--- a/ucs-school-ldap-acls-master/conffiles/etc/ldap/slapd.conf.d/65ucsschool
>+++ b/ucs-school-ldap-acls-master/conffiles/etc/ldap/slapd.conf.d/65ucsschool
>@@ -187,11 +187,11 @@ access to dn.regex="^cn=([^,]+),cn=shares,ou=([^,]+),@$@DISTRICT@$@@%@ldap/base@
> 
> # Mitglieder der lokalen Administratoren muessen einige temporaere Objekte schreiben duerfen
> # da keine regulaeren Ausdruecke auf Gruppenmitgliedschaften moeglich sind wird dies allen Lehrern erlaubt
>-access to dn.regex="^cn=([^,]+),cn=(groupName|sid|gid|gidNumber|mac),cn=temporary,cn=univention,@%@ldap/base@%@$$" filter="(&(objectClass=lock)(!(|(uidNumber=*)(objectClass=SambaSamAccount))))"
>+access to dn.regex="^cn=([^,]+),cn=(groupName|sid|gid|gidNumber|mac|uidNumber),cn=temporary,cn=univention,@%@ldap/base@%@$$" filter="(&(objectClass=lock)(!(|(uidNumber=*)(objectClass=SambaSamAccount))))"
> 	by dn.regex="^uid=([^,]+),cn=(@$@TEACHERS@$@|@$@TEACHERS-STAFF@$@|@$@STAFF@$@|@$@ADMINS@$@),cn=users,ou=([^,]+),@$@DISTRICT@$@@%@ldap/base@%@$$" write
> 	by * none break
> 
>-access to dn.regex="^cn=(groupName|sid|gid|gidNumber|mac),cn=temporary,cn=univention,@%@ldap/base@%@$$" attrs=children,entry
>+access to dn.regex="^cn=(groupName|sid|gid|gidNumber|mac|uidNumber),cn=temporary,cn=univention,@%@ldap/base@%@$$" attrs=children,entry
> 	by dn.regex="^uid=([^,]+),cn=(@$@TEACHERS@$@|@$@TEACHERS-STAFF@$@|@$@STAFF@$@|@$@ADMINS@$@),cn=users,ou=([^,]+),@$@DISTRICT@$@@%@ldap/base@%@$$" write
> 	by * none break
> 
>@@ -199,6 +199,10 @@ access to dn.base="cn=gidNumber,cn=temporary,cn=univention,@%@ldap/base@%@" attr
> 	by dn.regex="^uid=([^,]+),cn=(@$@TEACHERS@$@|@$@TEACHERS-STAFF@$@|@$@STAFF@$@|@$@ADMINS@$@),cn=users,ou=([^,]+),@$@DISTRICT@$@@%@ldap/base@%@$$" write
> 	by * none break
> 
>+access to dn.base="cn=uidNumber,cn=temporary,cn=univention,@%@ldap/base@%@" attrs=univentionLastUsedValue
>+	by dn.regex="^uid=([^,]+),cn=(@$@TEACHERS@$@|@$@TEACHERS-STAFF@$@|@$@STAFF@$@|@$@ADMINS@$@),cn=users,ou=([^,]+),@$@DISTRICT@$@@%@ldap/base@%@$$" write
>+	by * none break
>+
> # Mitglieder der lokalen Administratoren duerfen MAC-Adressen im Rechner- und DHCP-Objekt aendern
> access to dn.regex="^cn=([^,]+),cn=computers,ou=([^,]+),@$@DISTRICT@$@@%@ldap/base@%@$$" attrs=macAddress,sambaNTPassword
> 	by group/univentionGroup/uniqueMember.expand="cn=@$@GRPADMINS@$@$2,cn=ouadmins,cn=groups,@%@ldap/base@%@" write

Actions: View | Diff

Attachments on bug 39967: 7300 | 7301