Table of Contents
Advertisement
aci: (targetattr = "userPassword") ( version 3.0; acl "allow
userpassword self modification"; allow (write) userdn = "ldap:///self";)
In Directory Server 6.0, the default userPassword ACI at root DSE level provides equivalent
access control to the default 5.2 ACI at suffix level. However, if you want to reproduce exactly
the same access control as in 5.2, add the following ACI to your suffix. This ACI is the 5.2 ACI,
with the new password policy operational attributes for Directory Server 6.0.
aci: (targetattr != "nsroledn || aci || nsLookThroughLimit ||
nsSizeLimit || nsTimeLimit || nsIdleTimeout || passwordPolicySubentry ||
passwordExpirationTime || passwordExpWarned || passwordRetryCount ||
retryCountResetTime || accountUnlockTime || passwordHistory ||
passwordAllowChangeTime || pwdAccountLockedTime || pwdChangedTime ||
pwdFailureTime || pwdGraceUseTime || pwdHistory ||
pwdLastAuthTime || pwdPolicySubentry || pwdReset")(version 3.0; acl "Allow self entry modification
except for nsroledn, aci, resource limit attributes, passwordPolicySubentry
and password policy state attributes"; allow (write)userdn ="ldap:///self";)
Tip –
attributes. Instead, explicitly list the attributes to which you allow write access.
Command Line Changes
In Directory Server 6.0 the functionality of most command-line tools is replaced by only two
commands: dsadm and dsconf.
The following table shows commands used in Directory Server 5, and the corresponding
commands for Directory Server 6.0. The default path of these commands when installed from
native packages is /opt/SUNWdsee/ds6/bin. When installed from the zip installation, the
default path is install-path/ds6/bin.
TABLE 5–1
Version 5 Command
bak2db
bak2db-task
db2bak
Chapter 5 • Architectural Changes in Directory Server 6.0
Do not allow users write access to everything and then deny write access to specific
Directory Server 5 and 6 commands
Sun Confidential: Registered
Version 6.0 Command
dsadm restore
dsconf restore
dsadm backup
Command Line Changes
Description
Restore a database from backup (locally,
offline)
Restore a database from backup (remotely,
online)
Create a database backup archive (locally,
offline)
71
Advertisement
Table of Contents
