Ayush: Created page with "TCS 389-Directory Server “Only Attribute Modification Rights” LDAP ACL:- (targetattr = "*") (target = "ldap:///dc=pramod,dc=com")(version 3.0;acl "p..."

2015-11-15T06:31:18Z

Created page with "<center>TCS 389-Directory Server “Only Attribute Modification Rights” </center> LDAP ACL:- (targetattr = "*") (target = "ldap:///dc=pramod,dc=com")(version 3.0;acl "p..."

New page

<center>TCS 389-Directory Server “Only Attribute Modification Rights” </center>

LDAP ACL:-

(targetattr = "*") (target = "ldap:///dc=pramod,dc=com")(version 3.0;acl "pramod aci";

allow (write)(userdn = "ldap:///uid=pkumar,ou=linux,dc=pramod,dc=com");)

Change the acl values as target, uid, ou,dc values according to the client.

How to Apply:-

Using Lam(Ldap Account Manager) :-

URL= [http://192.168.122.20/lam http://192.168.122.20/lam]

Login From Directory Manager:-

[[Image:]]

Click on Tree-View:-

[[Image:]]

Click on Base DN:-

[[Image:]]

Click on Add Value under aci field:-

[[Image:]]

Paste ACL in Text BOX:-

ACL -

(targetattr = "*") (target = "ldap:///dc=pramod,dc=com")(version 3.0;acl "pramod aci";

allow (write)(userdn = "ldap:///uid=pkumar,ou=linux,dc=pramod,dc=com");)

[[Image:]]

Click on Update Object:-

[[Image:]]

Again Click on Update Object:-

[[Image:]]

Now Login By User on LAM:-

[[Image:]]

This user will be able to Modify any entry of 389-Directory server.

Note:- This user can't Add and Delete user but can modify any value of exist user.

389-Directory Server User ACL Modification - Revision history

Ayush: Created page with "TCS 389-Directory Server “Only Attribute Modification Rights” LDAP ACL:- (targetattr = "*") (target = "ldap:///dc=pramod,dc=com")(version 3.0;acl "p..."