PERSONAL INFORMATION IN SAMBA4

Roger Chin Garcia rching at corpus.uo.edu.cu
Tue Sep 1 13:44:54 UTC 2015


By default, you can change certain personal information on your user account, such as, your telephone number and address. Some administrators, however, may want to disable such permissions so that you cannot change your personal information.

If you apply "Deny" to the parent organizational unit for the Write Personal Properties permission, you may not succeed because a user account object has explicit permissions assigned to the object when the object is created. The user account is cloned from the user class that is specified in the schema and the Security permissions assigned to this user class become the default Security permissions of the user account object.

These permissions include the right to change personal details, and therefore, to override the permissions that are set by the parent organizational unit. To prevent your personal information from being changed, you must edit the schema, change the permissions that are set on the user class, and then reset the permissions on the existing user objects.

I need the user can not update your personal information for security reasons, then  I need edit the schema, change the permissions that are set on the user class, and then reset the permissions on the existing user objects. How cant I do that?




-- 

Síganos en Facebook y en Twitter:

@UOCuba

--









More information about the samba-technical mailing list