Changes between Version 23 and Version 24 of Howto_Ldap

Timestamp:

Jan 15, 2011 8:32:13 AM (2 years ago)

Author:

andudi

Comment:

--

Howto_Ldap

@@ -99 +99 @@
 checkpoint      512 30
 
-# For creating new Rouncube users
-access to dn.one="ou=users,ou=rcabook,dc=localhost" attrs=userPassword
-        by dn="cn=rcuser,dc=localhost" write
-
-# Grant the Roundcube user access to the whole addressbook
-access to dn.subtree="ou=rcabook,dc=localhost"
+# Grant the Roundcub user to create private users
+access to dn.one="ou=private,ou=rcabook,dc=localhost" attrs=userPassword
         by dn="cn=rcuser,dc=localhost" write
 
@@ -114 +110 @@
         by * none
 
+# Grant the Roundcube user access to the whole addressbook
+access to dn.subtree="ou=rcabook,dc=localhost"
+        by dn="cn=rcuser,dc=localhost" write  
+
+# Grant the Roundcube users access to their private addressbooks
+access to dn.regex="^[^,]+,ou=contacts,cn=([^,]+),ou=private,ou=rcabook,dc=localhost$"
+        by dn.exact,expand="cn=$1,ou=private,ou=rcabook,dc=localhost" write
+access to dn.regex="^[^,]+,ou=groups,cn=([^,]+),ou=private,ou=rcabook,dc=localhost$"
+        by dn.exact,expand="cn=$1,ou=private,ou=rcabook,dc=localhost" write
+
 # For direcory access
 access to *
@@ -187 +193 @@
 adding new entry "ou=groups,ou=rcabook,dc=localhost"
 
--create subdirectory for users: ou=users,ou=rcabook,dc=localhost
+-create subdirectory for private users: ou=private,ou=rcabook,dc=localhost
   (as Roundcube user: cn=rcuser,dc=localhost)
-adding new entry "ou=users,ou=rcabook,dc=localhost"
+adding new entry "ou=private,ou=rcabook,dc=localhost"
 
 The LDAP addressbook is ready now for using: