[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Acls in OpenLDAP

To: Owen DeLong <owen@delong.com>
Subject: Re: Acls in OpenLDAP
From: Howard Chu <hyc@symas.com>
Date: Fri, 04 Mar 2005 15:29:07 -0800
Cc: Gaurav Khanna <khannapost@yahoo.com>, OpenLDAP software list <openldap-software@OpenLDAP.org>
In-reply-to: <2147483647.1109947821@imac-en0.delong.sj.ca.us>
References: <20050304081003.62630.qmail@web90109.mail.scd.yahoo.com> <2147483647.1109947821@imac-en0.delong.sj.ca.us>
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8a6) Gecko/20050111

That's pretty much correct for now. It will soon change in 2.3.

Owen DeLong wrote:

I believe you need to use ACI and not ACL.  ACI are a newer feature and
are not well documented yet, but, ACI allows you to use the LDAP database
to specify the equivalent functionality of ACL (which are hard-coded
into slapd.conf).

Owen

--On Friday, March 4, 2005 12:10 AM -0800 Gaurav Khanna <khannapost@yahoo.com> wrote:

Hi,

We have a requirement to set the ACLs programmatically through JAVA
(JNDI) and it seems as if the ACL is not an attribute on the user or
group entries. This leads me to believe that ACLs for a user and group
cannot be set using JNDI.

Can the ACL be specified on the individual user or group entry? Can I use
LDIF to add or update ACLs?

Thanks

Gaurav

--
 -- Howard Chu
 Chief Architect, Symas Corp.       Director, Highland Sun
 http://www.symas.com               http://highlandsun.com/hyc
 Symas: Premier OpenSource Development and Support

References:
- Acls in OpenLDAP
  - From: Gaurav Khanna <khannapost@yahoo.com>
- Re: Acls in OpenLDAP
  - From: Owen DeLong <owen@delong.com>

Prev by Date: Re: Acls in OpenLDAP
Next by Date: RE: Using SecurID for authentication
Index(es):
- Chronological
- Thread