diff --git a/lib/newdb b/lib/newdb index bc5100a..0a9ea59 100755 --- a/lib/newdb +++ b/lib/newdb @@ -95,7 +95,7 @@ olcLimits: {0}dn.exact="uid=admin,ou=people,$SUFFIX" size.soft=unlimited size.h olcLimits: {1}dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" size.soft=unlimited size.hard=unlimited time.soft=unlimited time.hard=unlimited olcReadOnly: FALSE # Index -olcDbIndex: objectClass,contextCSN eq +olcDbIndex: objectClass,contextCSN,member,eduPersonPrincipalName,owner,supannRefId eq olcDbIndex: supannAliasLogin,mail,givenName,uid,cn,sn,supannMailPerso,displayName pres,eq,approx,sub # Accès super-utilisateur olcAccess: {0}to * diff --git a/lib/resetacl b/lib/resetacl index c0a652e..f1605d8 100755 --- a/lib/resetacl +++ b/lib/resetacl @@ -25,6 +25,10 @@ olcAccess: {4}to dn.one="ou=groups,$SUFFIX" attrs=member by set="this/supannGro olcAccess: {5}to dn.one="ou=structures,$SUFFIX" by * read olcAccess: {6}to dn.one="ou=people,$SUFFIX" by self read by users read by anonymous auth by * none olcAccess: {7}to * by users search +- +replace: olcDbIndex +olcDbIndex: objectClass,contextCSN,member,eduPersonPrincipalName,owner,supannRefId eq +olcDbIndex: supannAliasLogin,mail,givenName,uid,cn,sn,supannMailPerso,displayName pres,eq,approx,sub EOF ldapmodify -H ldapi:// -Y EXTERNAL -f $LDIF 2>/dev/null >/dev/null rm $LDIF