<div dir="ltr"><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif">Refer this doc <a href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#server-access-controls">https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#server-access-controls</a></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 28 October 2015 at 11:11, Prashant Bapat <span dir="ltr"><<a href="mailto:prashant@apigee.com" target="_blank">prashant@apigee.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">Making attributes anonymously readable is very simple. You need to look into RBAC and define the permissions/privileges you need. </div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On 28 October 2015 at 08:02, <span dir="ltr"><<a href="mailto:craig.linux@mypenguin.net.au" target="_blank">craig.linux@mypenguin.net.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
We have recently updated from IPA 3 to IPA 4.1 and one of the changes in<br>
security is what attributes are available for the anonymous LDAP<br>
queries.<br>
<br>
Does anyone know how to edit the anonymous LDAP settings so<br>
that the following are available?<br>
<br>
mail: <a href="mailto:craig@example.com" target="_blank">craig@example.com</a><br>
postalCode: 3000<br>
street: 1 Home Parade<br>
mobile: 0000-000-000<br>
telephoneNumber: 03-0000-0000<br>
<br>
Note: We have many different types of LDAP clients here and even though<br>
using encrypted BIND's did work from ldapsearch queries, I couldn't get<br>
them to consistently work from our email clients.<br>
<br>
Regards,<br>
<br>
Craig<br>
<span><font color="#888888"><br>
--<br>
Manage your subscription for the Freeipa-users mailing list:<br>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project<br>
</font></span></blockquote></div><br></div>
</div></div></blockquote></div><br></div>