Table of Contents
Advertisement
Creating ACIs Manually
where:
The quotation marks ("") around
is dependent upon the
The following table lists each keyword and the associated expressions:
Table 6-1
Keyword
target
targetattr
targetfilter
targattrfilters
In all cases, you must keep in mind that when you place an ACI on an entry, if it is
not a leaf entry, the ACI also applies to all entries below it. For example, if you
target the entry
apply to all entries in the accounting branch of the
As a counter example, if you place an ACI on the
ou=accounting,dc=example,dc=com
uid=sarette,ou=people,dc=example,dc=com
under the accounting tree.
Targeting a Directory Entry
To target a directory entry (and the entries below it), you must use the
keyword.
The
target
target="ldap:///distinguished_name"
194
Netscape Directory Server Administrator's Guide • January 2002
indicates the type of target
keyword
equal (=) indicates that the target is the object specified in the
not equal (!=) indicates the target is not the object specified in the
identifies the target
expression
keyword
LDIF Target Keywords
Valid Expressions
ldap:///distinguished_name
attribute
LDAP_filter
LDAP_operation:LDAP_filter
ou=accounting,dc=example,dc=com
keyword can accept a value of the following format:
are required. What you use for
expression
that you supply.
example.com
entry, you cannot target the
entry because it is not located
expression
expression
expression
Wildcard
Allowed?
yes
yes
yes
yes
, the permissions you set will
tree.
target
, and
.
Advertisement
Table of Contents
