How Access Control Works - Netscape ENTREPRISE SERVER 6.1 - 08-2002 ADMINISTRATOR Administrator's Manual

you use a large number for this value, you may need to restart Enterprise Server
when changes are made to the LDAP entries. For example, if this value is set to 120
seconds, Enterprise Server might be out of sync with the LDAP directory for as
long as two minutes. Only set a large value if your LDAP directory is not likely to
change often.
Using the
maximum number of entries that can be held in the cache. The default value for
this parameter is 200. New entries are added to the head of the list, and entries at
the end of this list are recycled to make new entries when the cache reaches its
maximum size.
You can also set the maximum number of group memberships that can be cached
per user entry using the
value for this parameter is 4. Non-membership of a user in a group is not cached.
For more information on ACL file directives, see the Netscape Enterprise Server
NSAPI Programmer's Guide.

How Access Control Works

When the server gets a request for a page, the server uses the rules in the ACL file
to determine if it should grant access or not. The rules can reference the hostname
or IP address of the computer sending the request. The rules can also reference
users and groups stored in the LDAP directory.
For example, the following ACL file contains the two default entries for the
Administration Server, plus an additional entry that allows users in the
"admin-reduced" group to access the Preferences tab in the Administration Server.
version 3.0;
# The following "es-internal" rules protect files such
# as icons and images related to Enterprise Server.
# These "es-internal" rules should not be modified.
acl "es-internal";
allow (read, list, execute,info) user = "anyone";
deny (write, delete) user = "anyone";
# The following "default" rules apply to the entire document
# directory of Enterprise Server. In this example, the rules
# are set up so that "all" users in the directory server are
# allowed to read, execute, list, and get information.
# The "all" users are not allowed to write to or delete any files.
# All clients that accesses the document directory of the web
# server will be required to submit a username and password
parameter of
magnus.conf
magnus.conf
, you can configure the
ACLUserCacheSize
parameter
ACLGroupCacheSize
Chapter 8 Controlling Access to Your Server
How Access Control Works
. The default
171