Example: Filtered Role Definition - Netscape DIRECTORY SERVER 6.2 - ADMINISTRATOR Administrator's Manual

Using Roles
Specify the managed role as follows:
dn: cn=Marketing,ou=people,dc=example,dc=com
objectclass: top
objectclass: LDAPsubentry
objectclass: nsRoleDefinition
objectclass: nsSimpleRoleDefinition
objectclass: nsManagedRoleDefinition
cn: Marketing
description: managed role for marketing staff
Notice that the
LDAPsubentry
Assign the role to a marketing staff member named Bob by doing an
as follows:
ldapmodify -D "cn=Directory Manager" -w secret -h host -p 389
dn: cn=Bob,ou=people,dc=example,dc=com
changetype: modify
add: nsRoleDN
nsRoleDN: cn=Marketing,ou=people,dc=example,dc=com
The
nsRoleDN
of a managed role, the marketing managed role
cn=Marketing,ou=people,dc=example,dc=com

Example: Filtered Role Definition

You want to set up a filtered role for sales managers. Run the
follows:
ldapmodify -D "cn=Directory Manager" -w secret -h host -p 389
Specify the filtered role as follows:
dn: cn=SalesManagerFilter,ou=people,dc=example,dc=com
objectclass: top
objectclass: LDAPsubentry
objectclass: nsRoleDefinition
objectclass: nsComplexRoleDefinition
objectclass: nsFilteredRoleDefinition
cn: SalesManagerFilter
nsRoleFilter: o=sales managers
Description: filtered role for sales managers
Notice that the
LDAPsubentry
classes. The
contain the value of
174 Netscape Directory Server Administrator's Guide • December 2003
nsManagedRoleDefinition
,
nsRoleDefinition
attribute present in the entry indicates that the entry is a member
nsFilteredRoleDefinition
,
nsRoleDefinition
attribute specifies the
nsRoleFilter
sales managers
object class inherits from the
and
nsSimpleRoleDefinition
.
object class inherits from the
, and
nsComplexRoleDefinition
(organization) attributes that
o
.
object classes.
ldapmodify
script as
ldapmodify
object