Defining Access From A Specific Domain; Defining Access At A Specific Time Of Day Or Day Of Week - Red Hat DIRECTORY SERVER 8.0 - ADMINISTRATION Administration Manual

6.4.7. Defining Access from a Specific Domain

A bind rule can specify that the bind operation must originate from a particular domain or host
machine. This is often used to force all directory updates to occur from a given machine or network
domain.
The LDIF syntax for setting a bind rule based on the DNS hostname is as follows:
dns = "DNS_Hostname or dns != "DNS_Hostname
WARNING
The dns keyword requires that the naming service used on your machine is DNS. If the
name service is not DNS, use the ip keyword instead.
The dns keyword requires a fully qualified DNS domain name. Granting access to a host without
specifying the domain creates a potential security threat. For example, the following expression is
allowed but not recommended:
dns = "legend.eng";
Instead, use a fully qualified name:
dns = "legend.eng.example.com";
The dns keyword allows wildcards. For example:
dns = "*.example.com";
The bind rule is evaluated to be true if the client accessing the directory is located in the named
domain. This can be useful for allowing access only from a specific domain. Wildcards will not work if
your system uses a naming service other than DNS. In such a case, if you want to restrict access to a
particular domain, use the ip keyword, as described in
IP Address".

6.4.8. Defining Access at a Specific Time of Day or Day of Week

You can use bind rules to specify that binding can only occur at a certain time of day or on a certain
day of the week. For example, you can set a rule that allows access only if it is between the hours of
8 a.m. and 5 p.m. Monday through Friday. The time used to evaluate access rights is the time on the
Directory Server, not the time on the client.
The LDIF syntax for setting a bind rule based on the time of day is as follows:
timeofday operator time
operator can be one of the following symbols:
equal to (=)
not equal to (!=)
greater than (>)
greater than or equal to (>=)
less than (<)
Defining Access from a Specific Domain
Section 6.4.6, "Defining Access from a Specific
167