View | Details | Raw Unified | Return to bug 49668
Collapse All | Expand All

(-)a/ucs-school-ldap-acls-master/65ucsschool (+8 lines)
 Lines 281-286   access to dn.regex="^(.+,)?cn=(users|kerberos|computers),@%@ldap/base@%@$$" Link Here 
281
	by group/univentionGroup/uniqueMember="cn=DC-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd
281
	by group/univentionGroup/uniqueMember="cn=DC-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd
282
	by group/univentionGroup/uniqueMember="cn=Member-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd
282
	by group/univentionGroup/uniqueMember="cn=Member-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd
283
	by * +0 break
283
	by * +0 break
284
285
# Schulserver duerfen die Passwoerter aller globalen Non-School-OU-Objekte replizieren
286
access to dn.regex="^(.+,)?ou=([^,]+),@%@ldap/base@%@$$" filter="(!(objectClass=ucsschoolOrganizationalUnit))"
287
	by group/univentionGroup/uniqueMember="cn=DC-Verwaltungsnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd
288
	by group/univentionGroup/uniqueMember="cn=Member-Verwaltungsnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd
289
	by group/univentionGroup/uniqueMember="cn=DC-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd
290
	by group/univentionGroup/uniqueMember="cn=Member-Edukativnetz,cn=ucsschool,cn=groups,@%@ldap/base@%@" +rscxd
291
	by * +0 break
284
"""
292
"""
285
293
286
print replace_ucr_variables(aclset)
294
print replace_ucr_variables(aclset)

Return to bug 49668