You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by Dylan Taft <so...@yahoo.com> on 2008/07/28 18:38:52 UTC
[ApacheDS] Having trouble setting up access control
I'm having trouble with setting up access control in apacheDS. I'm using
Apache DS 1.5.3
Apache Studio 1.2.0 RC1
I've tried to follow the docs listed here
http://directory.apache.org/apacheds/1.5/32-basic-authorization.html
I've added accessControlEnabled in my server.xml file, restarted the services..
I've tried to add administrativeRole as an attribute to dc=example,dc=com in DS studio
When I try, it just doesn't do it. I get a little red X next to the object in the ldap browser..no other errors.
Does anyone have a moment to walk me through doing this in studio? I'm trying to have everything marked as read only to normal users except the userPassword attribute. I've tried for several hours with no luck...
Thanks in advance!
Re: [ApacheDS] Having trouble setting up access control
Posted by Stefan Seelmann <se...@apache.org>.
Hi guys,
I guess I know the problem.
administrativeRole is an operational attribute, however they are not
displayed by default. Please activate the 'Show operational attribute'
option in the entry editor preferences, see here:
http://directory.apache.org/studio/static/users_guide/ldap_browser/preferences_entry_editor.html
I just created a Jira, I'll implement this for the 1.2.0 final release:
https://issues.apache.org/jira/browse/DIRSTUDIO-361
Sorry for the inconvenience.
Kind regards,
Stefan
Dylan Taft schrieb:
> I'm having trouble with setting up access control in apacheDS. I'm using
> Apache DS 1.5.3
> Apache Studio 1.2.0 RC1
>
> I've tried to follow the docs listed here
> http://directory.apache.org/apacheds/1.5/32-basic-authorization.html
>
> I've added accessControlEnabled in my server.xml file, restarted the services..
>
> I've tried to add administrativeRole as an attribute to dc=example,dc=com in DS studio
> When I try, it just doesn't do it. I get a little red X next to the object in the ldap browser..no other errors.
>
> Does anyone have a moment to walk me through doing this in studio? I'm trying to have everything marked as read only to normal users except the userPassword attribute. I've tried for several hours with no luck...
>
> Thanks in advance!
>
>
>
Re: [ApacheDS] Having trouble setting up access control
Posted by Alex Karasulu <ak...@apache.org>.
That sucks. I've never had these problems. Let's try to get to the bottom
of it though.
Alex
On Mon, Jul 28, 2008 at 1:28 PM, Shon Vella <sv...@novell.com> wrote:
> FWIW - I had exactly the same experience when trying to do anything with
> Apache Directory Studio 1.1 plugin for access control (haven't tried 1.2
> RC). Works great from LDIF, but the studio plugin seems barely functional. I
> was only ever able to get them to work for editing existing ACI entries that
> were created via LDIF.
>
> -Shon
>
> >>> "Alex Karasulu" <ak...@apache.org> 07/28/08 10:59 AM >>>
> FROM IRC:
>
> <akarasulu> notdf
> <akarasulu> I just installed 1.5.3 on a clean ubuntu 8.04 machine
> <akarasulu> and then changed the dc=example,dc=com entry
> <akarasulu> adding the new administrativeRole attribute
>
> Below is the LDIF output from Studio of this operation:
>
> <akarasulu> #!RESULT OK
> <akarasulu> #!CONNECTION ldap://localhost:10389
> <akarasulu> #!DATE 2008-07-28T12:53:20.623
> <akarasulu> dn: dc=example,dc=com
> <akarasulu> changetype: modify
> <akarasulu> add: administrativeRole
> <akarasulu> administrativeRole: accessControlSpecificArea
> <akarasulu> -
>
> <akarasulu> worked like a champion
> <akarasulu> just try putting this LDIF into a file and importing it
> <akarasulu> http://rafb.net/p/EzcKhp43.html
> <akarasulu> notdf let me know what happens
> <akarasulu> ttys
>
> Alex
>
> On Mon, Jul 28, 2008 at 12:38 PM, Dylan Taft <so...@yahoo.com> wrote:
>
> > I'm having trouble with setting up access control in apacheDS. I'm using
> > Apache DS 1.5.3
> > Apache Studio 1.2.0 RC1
> >
> > I've tried to follow the docs listed here
> > http://directory.apache.org/apacheds/1.5/32-basic-authorization.html
> >
> > I've added accessControlEnabled in my server.xml file, restarted the
> > services..
> >
> > I've tried to add administrativeRole as an attribute to dc=example,dc=com
> > in DS studio
> > When I try, it just doesn't do it. I get a little red X next to the
> object
> > in the ldap browser..no other errors.
> >
> > Does anyone have a moment to walk me through doing this in studio? I'm
> > trying to have everything marked as read only to normal users except the
> > userPassword attribute. I've tried for several hours with no luck...
> >
> > Thanks in advance!
> >
> >
> >
> >
>
>
> --
> Microsoft gives you Windows, Linux gives you the whole house ...
>
>
--
Microsoft gives you Windows, Linux gives you the whole house ...
Re: [ApacheDS] Having trouble setting up access control
Posted by Shon Vella <sv...@novell.com>.
FWIW - I had exactly the same experience when trying to do anything with Apache Directory Studio 1.1 plugin for access control (haven't tried 1.2 RC). Works great from LDIF, but the studio plugin seems barely functional. I was only ever able to get them to work for editing existing ACI entries that were created via LDIF.
-Shon
>>> "Alex Karasulu" <ak...@apache.org> 07/28/08 10:59 AM >>>
FROM IRC:
<akarasulu> notdf
<akarasulu> I just installed 1.5.3 on a clean ubuntu 8.04 machine
<akarasulu> and then changed the dc=example,dc=com entry
<akarasulu> adding the new administrativeRole attribute
Below is the LDIF output from Studio of this operation:
<akarasulu> #!RESULT OK
<akarasulu> #!CONNECTION ldap://localhost:10389
<akarasulu> #!DATE 2008-07-28T12:53:20.623
<akarasulu> dn: dc=example,dc=com
<akarasulu> changetype: modify
<akarasulu> add: administrativeRole
<akarasulu> administrativeRole: accessControlSpecificArea
<akarasulu> -
<akarasulu> worked like a champion
<akarasulu> just try putting this LDIF into a file and importing it
<akarasulu> http://rafb.net/p/EzcKhp43.html
<akarasulu> notdf let me know what happens
<akarasulu> ttys
Alex
On Mon, Jul 28, 2008 at 12:38 PM, Dylan Taft <so...@yahoo.com> wrote:
> I'm having trouble with setting up access control in apacheDS. I'm using
> Apache DS 1.5.3
> Apache Studio 1.2.0 RC1
>
> I've tried to follow the docs listed here
> http://directory.apache.org/apacheds/1.5/32-basic-authorization.html
>
> I've added accessControlEnabled in my server.xml file, restarted the
> services..
>
> I've tried to add administrativeRole as an attribute to dc=example,dc=com
> in DS studio
> When I try, it just doesn't do it. I get a little red X next to the object
> in the ldap browser..no other errors.
>
> Does anyone have a moment to walk me through doing this in studio? I'm
> trying to have everything marked as read only to normal users except the
> userPassword attribute. I've tried for several hours with no luck...
>
> Thanks in advance!
>
>
>
>
--
Microsoft gives you Windows, Linux gives you the whole house ...
Re: [ApacheDS] Having trouble setting up access control
Posted by Alex Karasulu <ak...@apache.org>.
FROM IRC:
<akarasulu> notdf
<akarasulu> I just installed 1.5.3 on a clean ubuntu 8.04 machine
<akarasulu> and then changed the dc=example,dc=com entry
<akarasulu> adding the new administrativeRole attribute
Below is the LDIF output from Studio of this operation:
<akarasulu> #!RESULT OK
<akarasulu> #!CONNECTION ldap://localhost:10389
<akarasulu> #!DATE 2008-07-28T12:53:20.623
<akarasulu> dn: dc=example,dc=com
<akarasulu> changetype: modify
<akarasulu> add: administrativeRole
<akarasulu> administrativeRole: accessControlSpecificArea
<akarasulu> -
<akarasulu> worked like a champion
<akarasulu> just try putting this LDIF into a file and importing it
<akarasulu> http://rafb.net/p/EzcKhp43.html
<akarasulu> notdf let me know what happens
<akarasulu> ttys
Alex
On Mon, Jul 28, 2008 at 12:38 PM, Dylan Taft <so...@yahoo.com> wrote:
> I'm having trouble with setting up access control in apacheDS. I'm using
> Apache DS 1.5.3
> Apache Studio 1.2.0 RC1
>
> I've tried to follow the docs listed here
> http://directory.apache.org/apacheds/1.5/32-basic-authorization.html
>
> I've added accessControlEnabled in my server.xml file, restarted the
> services..
>
> I've tried to add administrativeRole as an attribute to dc=example,dc=com
> in DS studio
> When I try, it just doesn't do it. I get a little red X next to the object
> in the ldap browser..no other errors.
>
> Does anyone have a moment to walk me through doing this in studio? I'm
> trying to have everything marked as read only to normal users except the
> userPassword attribute. I've tried for several hours with no luck...
>
> Thanks in advance!
>
>
>
>
--
Microsoft gives you Windows, Linux gives you the whole house ...