Accessing And Modifying Server Configuration; Access Control For Configuration Entries - Netscape DIRECTORY SERVER 7.0 Configuration Manual

Accessing and Modifying Server Configuration

Accessing and Modifying Server Configuration
This section discusses access control for configuration entries and describes the
various ways in which the server configuration can be viewed and modified. It
also covers restrictions to the kinds of modification that can be made and
discusses attributes that require the server to be restarted for changes to take
effect.
•

Access Control for Configuration Entries

• Changing Configuration Attributes
Access Control for Configuration Entries
When the Directory Server is installed, a default set of Access Control Instructions
(ACIs) is implemented for all entries under
an example of these default ACIs.
Code Example 2-3
aci: (targetattr = "*")(version 3.0; acl "Configuration
Adminstrators Group"; allow (all)
groupdn = "ldap:///cn=Configuration Administrators,ou=Groups,
ou=TopologyManagement, o=NetscapeRoot";)
aci: (targetattr = "*")(version 3.0; acl "Configuration
Adminstrator"; allow (all)
userdn = "ldap:///uid=admin,ou=Administrators,
ou=TopologyManagement, o=NetscapeRoot";)
aci: (targetattr = "*")(version 3.0; acl "Local Directory
Adminstrators Group"; allow (all)
groupdn = "ldap:///ou=Directory Administrators,
dc=example,dc=com";)
aci: (targetattr = "*")(version 3.0; acl "SIE Group"; allow(all)
groupdn = "ldap:///cn=slapd-phonebook, cn=Netscape Directory
Server, cn=Server Group, cn=phonebook.example.com,
dc=example,dc=com, o=NetscapeRoot";)
These default ACIs allow all LDAP operations to be carried out on all
configuration attributes by the following users:
• Members of the Configuration Administrators Group.
32 Netscape Directory Server Configuration, Command, and File Reference • October 2004
Default ACIs in dse.ldif
. Code Example 2-3 shows
cn=config