les users peuvent se trouver dans le ldap

bin/ldap/ldapconfvi.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+KAZ_ROOT=/kaz
+. $KAZ_ROOT/bin/.commonFunctions.sh
+setKazVars
+
+. $DOCKERS_ENV
+. $KAZ_KEY_DIR/env-ldapServ
+
+LDAP_IP=$(docker inspect -f '{{.NetworkSettings.Networks.ldapNet.IPAddress}}' ldapServ)
+
+read -p "quel éditeur ? [vi] " EDITOR
+EDITOR=${EDITOR:-vi}
+
+# if [ ${EDITOR} = 'emacs' ]; then
+#   echo "ALERTE ALERTE !!! quelqu'un a voulu utiliser emacs :) :) :)"
+#   exit
+# fi
+
+EDITOR=${EDITOR:-vi}
+export EDITOR=${EDITOR}
+
+ldapvi -h $LDAP_IP -D "cn=${LDAP_CONFIG_ADMIN_USERNAME},cn=config" -w ${LDAP_CONFIG_ADMIN_PASSWORD} -b cn=config

dockers/ldap/base/acl.ldif.tmpl

@@ -16,6 +16,7 @@ olcAccess: {1}to dn.subtree="$LDAPROOT"
   by dn="cn=mobilizon,ou=applications,$LDAPROOT" read
   by dn="cn=mastodon,ou=applications,$LDAPROOT" read
   by dn="$BINDDN" write
+  by users search
   by * none
 olcAccess: {2}to *
   by dn="$BINDDN" write