Visibility too high
Novell Cool Solutions: Question & Answer
Posted: 4 May 2005
Q:
The PROXY user for our LDAP server has the Entry Browse right and the Attribute CommonName read and compare right as a minimal set to handle LDAP context queries coming from the NetWare clients. But when I connect with an LDAP browser to the same LDAP server and do a similar anonymous bind, I can see additional properties of objects: Groupmembership, e-mail address, servernames, First name, Last name, Telephone number, Volume names. Why is this?
A:
It could come either from [Public] or in some cases because the attr is flagged
"Public read" in the schema.
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com