Updated acl's

[gosa.git] / contrib / openldap / slapd.conf

diff --git a/contrib/openldap/slapd.conf b/contrib/openldap/slapd.conf
index e8cf0484ce7baf9dfefe62753bcc4abc89dfd75d..c2cd37d94f8ac082b7706b7ffd0e47dc5d8bb8fd 100644 (file)
--- a/contrib/openldap/slapd.conf
+++ b/contrib/openldap/slapd.conf
@@ -166,11 +166,13 @@ access to dn="ou=incoming,dc=gonicus,dc=de"
        by dn="cn=terminal-admin,dc=gonicus,dc=de" write
        by dn="cn=ldapadmin,dc=gonicus,dc=de" write
        by dn.regex="uid=[^/]+/admin\+(realm=GONICUS.LOCAL)?" write
+       by * none
 
 access to dn.sub="ou=incoming,dc=gonicus,dc=de"
        by dn="cn=terminal-admin,dc=gonicus,dc=de" write
        by dn="cn=ldapadmin,dc=gonicus,dc=de" write
        by dn.regex="uid=[^/]+/admin\+(realm=GONICUS.LOCAL)?" write
+       by * none
 
 # What trees should be readable, depends on your policy. Either
 # use this entry and specify what should be readable, or leave