Lock down the LDAP backend - only samba may read or write

[kai/samba.git] / source4 / setup / slapd.conf

diff --git a/source4/setup/slapd.conf b/source4/setup/slapd.conf
index b1ce6f6492e189a8a1c8c975bc0d53b80a80d2ed..1dda752af0586ca5e840ca5cc0e38e1b36a8db78 100644 (file)
--- a/source4/setup/slapd.conf
+++ b/source4/setup/slapd.conf
@@ -32,7 +32,7 @@ access to dn.subtree="cn=samba"
 
 access to dn.subtree="${DOMAINDN}"
        by dn=cn=samba-admin,cn=samba manage
-       by * read
+       by * none
 
 password-hash   {CLEARTEXT}