TCS 389-Directory Server Only Attribute Modification Rights

Auto-generated from the uploaded PDF TCS_389-Directory_Server_Only_Attribute_Modification_Rights.pdf. This is an extracted-text rendering for searchability; see the original PDF for exact formatting, diagrams, tables, and images.

TCS 389-Directory Server “Only Attribute Modification Rights”


LDAP ACL:-

(targetattr = "*") (target = "ldap:///dc=pramod,dc=com")(version 3.0;acl "pramod aci";
allow (write)(userdn = "ldap:///uid=pkumar,ou=linux,dc=pramod,dc=com");)

How to Apply:-

Using Lam(Ldap Account Manager) :-
URL= http://192.168.122.20/lam

Login From Directory Manager:-


Click on Tree-View:-

Click on Base DN:-


Click on Add Value under aci field:-

Paste ACL in Text BOX:-


Click on Update Object:-

Again Click on Update Object:-


Now Login By User on LAM:-

This user will be able to Modify any entry of 389-Directory server.

Note:- This user can't Add and Delete user but can modify any value of exist user.

Thanks....