[Samba] Samba4 LDAP ACLs - access to POSIX attributes from a non-admin account

[Rob McCorkell]

On 15/12/12 13:31, Achim Gottinger wrote:
> It might work if you give Anonymous full read Access to the cn=Users 
> branch via AD User and Group management.
How is it possible to do this from the Samba4 server? Unfortunately 
Windows is out of the question here, because this will be part of 
Karoshi Server which will be distributed as a self-contained Linux 
distribution. Therefore the ideal solution would be either direct LDAP 
modification, or use of samba-tool or other utilities.