Sun Microsystems 8190994 Server User Manual


  Open as PDF
of 148
 
aci: (targetattr = "userPassword") ( version 3.0; acl "allow
userpassword self modification"; allow (write) userdn = "ldap:///self";)
In Directory Server 6.0, the default userPassword ACI at root DSE level provides equivalent
access control to the default 5.2 ACI at sux level. However, if you want to reproduce exactly
the same access control as in 5.2, add the following ACI to your sux. This ACI is the 5.2 ACI,
with the new password policy operational attributes for Directory Server 6.0.
aci: (targetattr != "nsroledn || aci || nsLookThroughLimit ||
nsSizeLimit || nsTimeLimit || nsIdleTimeout || passwordPolicySubentry ||
passwordExpirationTime || passwordExpWarned || passwordRetryCount ||
retryCountResetTime || accountUnlockTime || passwordHistory ||
passwordAllowChangeTime || pwdAccountLockedTime || pwdChangedTime ||
pwdFailureTime || pwdGraceUseTime || pwdHistory ||
pwdLastAuthTime || pwdPolicySubentry || pwdReset")(version 3.0; acl "Allow self entry modification
except for nsroledn, aci, resource limit attributes, passwordPolicySubentry
and password policy state attributes"; allow (write)userdn ="ldap:///self";)
Tip – Do not allow users write access to everything and then deny write access to specic
attributes. Instead, explicitly list the attributes to which you allow write access.
Command Line Changes
In Directory Server 6.0 the functionality of most command-line tools is replaced by only two
commands: dsadm and dsconf.
The following table shows commands used in Directory Server 5, and the corresponding
commands for Directory Server 6.0. The default path of these commands when installed from
native packages is /opt/SUNWdsee/ds6/bin. When installed from the zip installation, the
default path is install-path/ds6/bin.
TABLE 5–1 DirectoryServer 5 and6 commands
Version5Command Version6.0Command Description
bak2db dsadm restore Restore a databasefrom backup (locally,
oine)
bak2db-task dsconf restore Restore a databasefrom backup (remotely,
online)
db2bak dsadm backup Createa database backup archive (locally,
oine)
CommandLineChanges
Chapter5 • ArchitecturalChanges inDirectory Server6.0 71
SunCondential:Registered
 previous next