Tutorial 12: OpenLDAP ACLs (Access control lists)

Simple Rules

1. Allow everyone to read everything 

 access to *  
  by * read 
  by anonymous auth   

2. Allows anonymous user to try authentication and self to change it

 access to attrs="userPassword"  
  by self =w  
  by anonymous auth  

3. When nothing is working try

It will allow all dn's to read everything, update self, and authenticate any anonymous user (if credentials are correct he will be successful.)

 access to *  
    by anonymous auth  
    by self write  
    by users read  

For More visit:

http://www.openldap.org/doc/admin24/access-control.html 

http://www.openldap.org/doc/admin24/sasl.html

http://wiki.mandriva.com/fr/uploads/3/3a/Mandriva-dit-access-template.conf

http://www.egroupware.org/forum#nabble-td3984915

http://www.openldap.org/lists/openldap-technical/201007/msg00287.html

http://www.openldap.org/faq/data/cache/1134.html

http://www.openldap.org/cgi-bin/wilma_glimpse/openldap-software?query=dit&Search=Search&errors=0&maxfiles=50&maxlines=10&.cgifields=lineonly&.cgifields=restricttofiles&.cgifields=filelist&.cgifields=partial&.cgifields=case

http://sunsite.uakom.sk/sunworldonline/swol-07-1999/swol-07-ldap.html