ACI in OpenLDAP.

[Thomas_W_Collins@Dell.com]

Does OpenLDAP support Access Control Instances?  I have seen some 
reference to what I think are them in the core.schema (OpenLDAPaci).
If so, do they operate somewhat like the acis' in Netscape Directory Server?

Thanks

Tom

-----Original Message-----
From: Kurt D. Zeilenga [mailto:Kurt@OpenLDAP.org]
Sent: Tuesday, January 16, 2001 6:50 PM
To: Thomas_W_Collins@exchange.dell.com
Cc: openldap-software@OpenLDAP.org
Subject: RE: SASL/LDAP authentication questions?


At 05:07 PM 1/16/01 -0600, Thomas_W_Collins@Dell.com wrote:
>One more thing.  When I execute the ldapsearch with the "correct"
>credentials,
>what I get back is the following:
>
>dn: uid=BSmith,o=NASH,dc=dell,dc=com
>userPassword::QlNlaWRIbA==


>Can anyone tell me what is going on with the value returned for the
>userPassword?

As previously noted, ldapsearch provides values of userPassword
in base64 form.  The value is 'BSeidHl'.

>Is this the SAS/DIGEST-MD5 encrypted password?

No. It's <uid=BSmith,o=NASH,dc=dell,dc=com>'s user password, used
for simple authentication.  SASL/DIGEST-MD5 secrets are stored
in Cyrus's SASLdb.

Kurt