389-Directory Server User ACL Modification

TCS 389-Directory Server “Only Attribute Modification Rights”

LDAP ACL:-

(targetattr = "*") (target = "ldap:///dc=pramod,dc=com")(version 3.0;acl "pramod aci";

allow (write)(userdn = "ldap:///uid=pkumar,ou=linux,dc=pramod,dc=com");)

Change the acl values as target, uid, ou,dc values according to the client.

How to Apply:-

Using Lam(Ldap Account Manager) :-

Login From Directory Manager:-

[[Image:]]

Click on Tree-View:-

[[Image:]]

Click on Base DN:-

[[Image:]]

Click on Add Value under aci field:-

[[Image:]]

Paste ACL in Text BOX:-

ACL -

(targetattr = "*") (target = "ldap:///dc=pramod,dc=com")(version 3.0;acl "pramod aci";

allow (write)(userdn = "ldap:///uid=pkumar,ou=linux,dc=pramod,dc=com");)

[[Image:]]

Click on Update Object:-

[[Image:]]

Again Click on Update Object:-

[[Image:]]

Now Login By User on LAM:-

[[Image:]]

This user will be able to Modify any entry of 389-Directory server.

Note:- This user can't Add and Delete user but can modify any value of exist user.