Lines 281-286
access to dn.regex="^(.+,)?cn=(users|kerberos|computers),@%@ldap/base@%@$$"
|
Link Here
|
---|
|
281 |
by group/univentionGroup/uniqueMember="cn=DC-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd |
281 |
by group/univentionGroup/uniqueMember="cn=DC-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd |
282 |
by group/univentionGroup/uniqueMember="cn=Member-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd |
282 |
by group/univentionGroup/uniqueMember="cn=Member-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd |
283 |
by * +0 break |
283 |
by * +0 break |
|
|
284 |
|
285 |
# Schulserver duerfen die Passwoerter aller globalen Non-School-OU-Objekte replizieren |
286 |
access to dn.regex="^(.+,)?ou=([^,]+),@%@ldap/base@%@$$" filter="(!(objectClass=ucsschoolOrganizationalUnit))" |
287 |
by group/univentionGroup/uniqueMember="cn=DC-Verwaltungsnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd |
288 |
by group/univentionGroup/uniqueMember="cn=Member-Verwaltungsnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd |
289 |
by group/univentionGroup/uniqueMember="cn=DC-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd |
290 |
by group/univentionGroup/uniqueMember="cn=Member-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd |
291 |
by * +0 break |
284 |
""" |
292 |
""" |
285 |
|
293 |
|
286 |
print replace_ucr_variables(aclset) |
294 |
print replace_ucr_variables(aclset) |