Red Hat DIRECTORY SERVER 7.1 User Manual

Accessing and Modifying Server Configuration
32 Red Hat Directory Server Configuration, Command, and File Reference • May 2005
Accessing and Modifying Server Configuration
This section discusses access control for configuration entries and describes the
various ways in which the server configuration can be viewed and modified. It
also covers restrictions to the kinds of modification that can be made and
discusses attributes that require the server to be restarted for changes to take
effect.
• Access Control for Configuration Entries
• Changing Configuration Attributes
Access Control for Configuration Entries
When the Directory Server is installed, a default set of access control instructions
(ACIs) is implemented for all entries under cn=config . Code Example 2-3 shows
an example of these default ACIs.
Code Example 2-3 Default ACIs in dse.ldif
These default ACIs allow all LDAP operations to be carried out on all
configuration attributes by the following users:
• Members of the Configuration Administrators Group.
aci: (targetattr = "*")(version 3.0; acl "Configuration
Adminstrators Group"; allow (all)
groupdn = "ldap:///cn=Configuration Administrators,ou=Groups,
ou=TopologyManagement, o=NetscapeRoot";)
aci: (targetattr = "*")(version 3.0; acl "Configuration
Adminstrator"; allow (all)
userdn = "ldap:///uid=admin,ou=Administrators,
ou=TopologyManagement, o=NetscapeRoot";)
aci: (targetattr = "*")(version 3.0; acl "Local Directory
Adminstrators Group"; allow (all)
groupdn = "ldap:///ou=Directory Administrators,
dc=example,dc=com";)
aci: (targetattr = "*")(version 3.0; acl "SIE Group"; allow(all)
groupdn = "ldap:///cn=slapd-phonebook, cn=Red Hat Directory
Server, cn=Server Group, cn=phonebook.example.com,
dc=example,dc=com, o=NetscapeRoot";)

Red Hat DIRECTORY SERVER 7.1 Specifications

General

Brand	Red Hat
Model	DIRECTORY SERVER 7.1
Category	Server
Language	English