Re: [389-users] DS ACLs - still

[Jim Finn <jamespfinn@xxxxxxxxx>]

Have you set the following?
dn: cn=config
nsslapd-allow-anonymous-access: off 

http://directory.fedoraproject.org/wiki/Anonymous_Access_Switch

Jim Finn

On Tue, Mar 6, 2012 at 12:24 PM, Karoly Czovek <karoly.czovek@xxxxxxxxxxxxxx> wrote:

Hi there,

i faced into the following problem:

installed one instance of 389ds to our DR site.

Imported the databases

Set up SSL 

Removed the anonymous read ACLs

Restarted the dirsrv

Replication is not set up.

and I stil can pull the whole db, with a simple

ldapsearch -x -LLL -h ds-drb -b "dc=foo,dc=bar"

389-ds-base-libs-1.2.9.14-1.el6_2.2.x86_64

389-admin-1.1.25-1.el6.x86_64

389-admin-console-doc-1.1.8-1.el6.noarch

389-console-1.1.7-1.el6.noarch

389-ds-base-1.2.9.14-1.el6_2.2.x86_64

389-admin-console-1.1.8-1.el6.noarch

389-ds-console-doc-1.2.6-1.el6.noarch

389-dsgw-1.1.7-2.el6.x86_64

389-adminutil-1.1.14-2.el6.x86_64

389-ds-console-1.2.6-1.el6.noarch

389-ds-1.2.2-1.el6.noarch

Any idea?

-- 
Karoly CZOVEK
Senior Systems Administrator

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users