To use this test, you need some AACLs taking care of writing on some attributes. We are using the example presented in the general documentation page :
- ldaptestwrite \
-D uid=john,ou=People,dc=test,dc=org \
-w joepass \
-a uid=john,ou=People,dc=test,dc=org \
-t uid=jenny,ou=People,dc=test,dc=org \
cn
This means : "Has John the right to write on Jenny's cn attribute ?".
The actor of the action is the -a parameter and the target is precised with -t.
The attributes are attr[,attr]*.
The authentication phase is used just to verify that the user is authenticated
to avoid brute force, ...
But most important, the OID : "1.3.6.1.4.1.13129.1.5.1".
|