Groups Admin delegation

UCS - Univention Corporate Server
3

Hi, to allow writing I added the following in the /etc/ldap/slapd.conf file:

access to dn.sub="dc=dom,dc=lan" filter="(&(objectClass=posixGroup)(objectClass=univentionGroup)(!(|(cn=Domain Admins)(cn=Groups Admin)(cn=Administrators))))" attrs="uniqueMember,memberUid"
    by set="user & [cn=Groups Admin,cn=groups,dc=dom,dc=lan]/uniqueMember*" write
    by * break

now I have to make sure that the changes are not lost when the file is updated from the templates.

1 Like