How to allow a LDAP user creates new users in Ldap database in RHEL?

Solution Unverified - Updated -

Environment

Red Hat Enterprise Linux 4 and 5

Issue

You need to give special permissions to an LDAP user to create new users in that LDAP database.

Resolution

Include the following ACL in slapd.conf to allow user "teste" creates new users in LDAP database (domain example.com):

access to *
        by dn="cn=Manager,dc=example,dc=com.br" write
        by dn="cn=replicator,dc=example,dc=com.br" write
        by dn="uid=teste,ou=usuarios,dc=example,dc=com.br" write
        by dn="cn=qmail,dc=example,dc=com.br" read   # This example envolves authentication in qmail. Adjust it to your application.
        by self read
        by anonymous read

In addition to it, you can include the following ACLs to allow users change your own password:

access to attrs=userPassword 
        by self write 
        by anonymous auth 
        by * none 
access to attrs=shadowLastChange 
        by self write 
        by * read 
access to * 
        by * read

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.