Directory + Proxy + aaaghhhh!!!!!!
hi, i have the following problem when i want to do this:
- I have a Sun1DirectoryServer 5.2 pth4 running
- I have a Sun1WebProxyServer 4.0.3 running in same machine wich Directory
- i have following DIT in directory
[root]
|-dc=uy
|
dc=prueba
|_ ou=userLinux (2 ACIs)
||- cn=bindUserLinux
|| * person
||
||- uid=toto1
||* person
||* organitationalPerson
||* inetorgperson
||* posixAccount
||
||- uid=toto2
||* person
||* organitationalPerson
||* inetorgperson
||* posixAccount
||
||_ uid=toto3
|* person
|* organitationalPerson
|* inetorgperson
|* posixAccount
|
|_ dc=userProxy (1 ACIs)
|- cn=bindUserProxy
| * person
|_ cn=http
|_ <see DISCUSSION>
(because when i post the DIT not see ok the entries are
uid=toto1,ou=userLinux,dc=prueba,dc=uy
uid=toto2,ou=userLinux,dc=prueba,dc=uy
uid=toto3,ou=userLinux,dc=prueba,dc=uy
cn=bindUserLinux,ou=userLinux,dc=prueba,dc=uy
dc=userProxy,dc=prueba,dc=uy
cn=bindUserProxy,dc=userProxy,dc=prueba,dc=uy
cn=http,dc=userProxy,dc=prueba,dc=uy
<DISCUSSION>,cn=http,dc=userProxy,dc=prueba,dc=uy
)
i want to grant acces proxy to users "toto1" and "toto2"
the acis in "userLinux" are for bindUserLinux and bindUserProxy (with all acces for now)
the aci in "userProxy" are for bindUserProxy (with all acces for now)
i config acces to http://* in proxy server to entries group "userProxy" with basic autentication but when i cosiderer:
DISCUSSION:
a) when i put copy entries for toto1 and toto2, when i login in browser the proxy grant
acces and all work ok.
b) when i use referrs to toto1 and toto2 entries, when i login, the proxy denied acces
c) when i use alias objectclass to toto1, toto1 entries, when i login, the proxy denied
acces.
d) when i use alias with extensible objectclass to toto1, toto1 entries, when i login, the
proxy denied acces.
Note: i probe with ldap search cases a) and b), they show me all data entries
i can't brobe c) y d) if this object class are setting ok
縏here are any restriction in Proxy that authenticate via ldap for the entries, like the entries can't be alias or reffers?
縤f not are resticctions about the entries to proxy, why with reffers not work?
縯here's another way to do this?
Thanks!!! :)
Mensaje editado por:
maximatt
Mensaje editado por:
maximatt
Mensaje editado por:
maximatt
