Changing Configuration Attributes - Netscape DIRECTORY SERVER 6.01 Configuration Manual

Code Example 2-3
aci: (targetattr = "*")(version 3.0; acl "Configuration
Adminstrators Group"; allow (all)
groupdn = "ldap:///cn=Configuration Administrators,ou=Groups,
ou=TopologyManagement, o=NetscapeRoot";)
aci: (targetattr = "*")(version 3.0; acl "Configuration
Adminstrator"; allow (all)
userdn = "ldap:///uid=admin,ou=Administrators,
ou=TopologyManagement, o=NetscapeRoot";)
aci: (targetattr = "*")(version 3.0; acl "Local Directory
Adminstrators Group"; allow (all)
groupdn = "ldap:///ou=Directory Administrators,
dc=example,dc=com";)
aci: (targetattr = "*")(version 3.0; acl "SIE Group"; allow(all)
groupdn = "ldap:///cn=slapd-phonebook, cn=Netscape Directory
Server, cn=Server Group, cn=phonebook.example.com,
dc=example,dc=com, o=NetscapeRoot";)
These default ACIs allow all LDAP operations to be carried out on all configuration
attributes by the following users:
• Members of the Configuration Administrators Group,
• The user acting as the Administrator, who has the uid admin that can be
configured at installation time,
• Members of local Directory Administrators Group
• The local Directory Administrator (root DN)
• The SIE (Server Instance Entry) Group that is usually assigned using the Set
Access Permissions from the main topology view in the main console.
For more information on Access Control see Chapter 5 of the Netscape Directory
Server Administrator's Guide.

Changing Configuration Attributes

You can view and change server attribute values in one of three ways. You make
the changes by using LDAP through Netscape Console, by performing
and commands or by manually editing the
ldapmodify
Default ACIs in dse.ldif
Chapter 2
Accessing and Modifying Server Configuration
ldapsearch
file.
dse.ldif
Core Server Configuration Reference 29