external/mailinabox
1
0
Fork 0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2026-03-12 17:07:23 +01:00
Code Issues Releases Wiki Activity

Allow the nextcloud service account to be able to change user account passwords.

Browse Source 
This should be removed once Nextcloud Server iss 18406 is fixed.
This commit is contained in:
downtownallday
2022-04-08 10:05:34 -04:00
parent 98f4e5b2fc
commit 70475cc294
2 changed files with 38 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
setup/ldap.sh
View File

@@ -579,6 +579,15 @@ apply_access_control() {
ldapmodify -Q -Y EXTERNAL -H ldapi:/// >/dev/null <<EOF
dn: $cdn
replace: olcAccess
# the next line is for nextcloud to be able to change user account
# passwords. remove it when nextcloud server issue #18406 is fixed
olcAccess: to dn.subtree="${LDAP_USERS_BASE}" attrs=userPassword
by dn.exact="cn=management,${LDAP_SERVICES_BASE}" write
by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" read
by dn.exact="cn=nextcloud,${LDAP_SERVICES_BASE}" write
by self =wx
by anonymous auth
by * none
olcAccess: to attrs=userPassword
by dn.exact="cn=management,${LDAP_SERVICES_BASE}" write
by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" read