HP UX Red Hat Direry Server Software manual ACI Write Subscribers

Granting Write Access to Personal Entries

suffix in the Target directory entry field. In the attribute table, select the checkboxes for the homePhone, homePostalAddress, and userPassword attributes.

All other checkboxes should be clear; if it is easier, click the Check None button to clear the checkboxes for all attributes in the table, then click the Name header to organize them alphabetically, and select the appropriate ones.

6.In the Hosts tab, click Add to display the Add Host Filter dialog box. In the DNS host filter field, type *.example.com. Click OK to dismiss the dialog box.

7.Click OK in the Access Control Editor window.

The new ACI is added to the ones listed in the Access Control Manager window.

9.2.2. ACI "Write Subscribers"

NOTE

By setting this permission, you are also granting users the right to delete attribute values.

In LDIF, to grant example.com subscribers the right to update their password and home telephone number, write the following statement:

aci: (targetattr="userPassword homePhone") (version 3.0; acl

"Write Subscribers"; allow (write) userdn= "ldap://self" and

authmethod="ssl";)

This example assumes that the aci is added to the ou=subscribers, dc=example,dc=com entry.

example.com subscribers do not have write access to their home address because they might delete the attribute, and example.com needs that information for billing. Therefore, the home address is business-critical information.

From the Console, set this permission by doing the following:

1.In the Directory tab, right-click the Subscribers entry under the example.com node in the left navigation tree, and choose Set Access Permissions from the pop-up menu to display the Access Control Manager.

2.Click New to display the Access Control Editor.

3.In the Users/Groups tab, in the ACI name field, type Write Subscribers. In the list of users granted access permission, do the following:

221