Sun Microsystems 8190994 manual Command Line Changes

Command Line Changes

aci: (targetattr = "userPassword") ( version 3.0; acl "allow

userpassword self modification"; allow (write) userdn = "ldap:///self";)

In Directory Server 6.0, the default userPassword ACI at root DSE level provides equivalent access control to the default 5.2 ACI at suffix level. However, if you want to reproduce exactly the same access control as in 5.2, add the following ACI to your suffix. This ACI is the 5.2 ACI, with the new password policy operational attributes for Directory Server 6.0.

aci: (targetattr != "nsroledn aci nsLookThroughLimit nsSizeLimit nsTimeLimit nsIdleTimeout passwordPolicySubentry passwordExpirationTime passwordExpWarned passwordRetryCount retryCountResetTime accountUnlockTime passwordHistory passwordAllowChangeTime pwdAccountLockedTime pwdChangedTime pwdFailureTime pwdGraceUseTime pwdHistory

pwdLastAuthTime pwdPolicySubentry pwdReset")(version 3.0; acl "Allow self entry modification except for nsroledn, aci, resource limit attributes, passwordPolicySubentry

and password policy state attributes"; allow (write)userdn ="ldap:///self";)

Tip – Do not allow users write access to everything and then deny write access to specific attributes. Instead, explicitly list the attributes to which you allow write access.

Command Line Changes

In Directory Server 6.0 the functionality of most command-line tools is replaced by only two commands: dsadm and dsconf.

The following table shows commands used in Directory Server 5, and the corresponding commands for Directory Server 6.0. The default path of these commands when installed from native packages is /opt/SUNWdsee/ds6/bin. When installed from the zip installation, the default path is install-path/ds6/bin.

TABLE 5–1Directory Server 5 and 6 commands

Version 5 Command	Version 6.0 Command	Description
bak2db	dsadm restore	Restore a database from backup (locally,
		offline)
bak2db-task	dsconf restore	Restore a database from backup (remotely,
		online)
db2bak	dsadm backup	Create a database backup archive (locally,
		offline)
Chapter 5 • Architectural Changes in Directory Server 6.0		71
	Sun Confidential: Registered