aboutsummaryrefslogtreecommitdiffstats
path: root/ldap/README
blob: 7fdc08888b2d9586e4cca811b6e0d896737cad25 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
/!\ This work is still in developpement, DO NOT run/install that on a
production server!


Since the user now have (partial) write access to the LDAP directory, it
is of crucial importance to configure the ACL properly.

 * "populate.ldif" is meant to provide at least an example of every
single situation we may encounter in our directory.

 * "test-user-acl.sh" checks the database against the ACLs.


/!\ Every modification to the schema or the ACLs should be made to
"populate.ldif" and "test-user-acl.sh" too!


Usage:

  * Load the ACLs:

    ldapmodify -Y EXTERNAL -H ldapi:/// -f acl.ldif

  * Repopulate the database (will clear it out first!):

    ldapdelete -Y EXTERNAL -H ldapi:/// -r "ou=virtual,o=mailHosting,dc=fripost,dc=dev" ; ldapadd -Y EXTERNAL -H ldapi:/// -f populate.ldif

  * Running the test suite:

    sudo ./test-user-acl.sh