Initial Commit

templates/fd-service_accounts_acl.ldif.j2

@@ -0,0 +1,38 @@
+dn: olcDatabase={1}mdb,cn=config
+changetype: modify
+delete: olcAccess
+-
+add: olcAccess
+olcAccess: {0}to dn.subtree="{{ base_dn }}" attrs=userPassword
+  by self write
+  by dn.base="cn=admin,{{ base_dn }}" write
+  by dn.children="ou=dsa,{{ base_dn }}" write
+  by anonymous auth
+  by * none
+-
+add: olcAccess
+olcAccess: {1}to dn.subtree="ou=people,{{ base_dn }}"
+  by self read
+  by dn.base="uid=test.user,ou=people,{{ base_dn }}" write
+  by dn.base="cn=admin,{{ base_dn }}" write
+  by dn.children="ou=dsa,{{ base_dn }}" read
+  by anonymous auth
+  by * none
+-
+add: olcAccess
+olcAccess: {2}to attrs=userPassword,shadowLastChange
+  by self write
+  by anonymous auth
+  by dn="cn=admin,{{ base_dn }}" write
+  by * none
+-
+add: olcAccess
+olcAccess: {3}to dn.subtree="{{ base_dn }}"
+  by self read
+  by dn.base="cn=admin,{{ base_dn }}" write
+  by dn.children="ou=dsa,{{ base_dn }}" write
+  by * none
+-
+add: olcAccess
+olcAccess: {4}to dn.base=""
+  by * none