Samba + LDAP acl – 匿名绑定?
我有一个工作Samba PDC使用OpenLDAP作为后端。 我即将build立一个samba代理用户,并在编写正确的安全ACL时遇到问题。 我用这个acl: {0}to * by group.exact="cn=ldap.admins,ou=groups,dc=example,dc=com" write by * break {1}to dn.one="dc=example,dc=com" filter=(objectClass=sambaDomain) by group.exact="cn=samba.admins,ou=groups,dc=example,dc=com" write by * break {2}to attrs=@sambaSamAccount,userPassword by group.exact="cn=samba.admins,ou=groups,dc=example,dc=com" write by * break {3}to dn.subtree="ou=people,dc=example,dc=com" attrs=userPassword by self write by * break {4}to attrs=userPassword,shadowLastChange,sambaNTPassword,sambaLMPassword,sambaPwdLastSet,sambaPwdMustChange by self read by anonymous auth by * none {5}to * by users read (在这里find: […]