You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bu...@apache.org on 2019/12/10 03:04:24 UTC
svn commit: r1053857 - in /websites/staging/directory/trunk/content: ./
apacheds/advanced-ug/4.2.3-enabling-access-control.html
Author: buildbot
Date: Tue Dec 10 03:04:24 2019
New Revision: 1053857
Log:
Staging update by buildbot for directory
Modified:
websites/staging/directory/trunk/content/ (props changed)
websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.3-enabling-access-control.html
Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Tue Dec 10 03:04:24 2019
@@ -1 +1 @@
-1871081
+1871114
Modified: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.3-enabling-access-control.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.3-enabling-access-control.html (original)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.3-enabling-access-control.html Tue Dec 10 03:04:24 2019
@@ -184,30 +184,27 @@ h2:hover > .headerlink, h3:hover > .head
<h1 id="423-enabling-access-control">4.2.3 - Enabling Access Control<a class="headerlink" href="#423-enabling-access-control" title="Permanent link">¶</a></h1>
<p>The Access Control Subsystem (ACI) is described in the Basic User Guide. The ACI is disabled by default and the simplest way to enable it is to <a href="apacheds/basic-ug/3.2-basic-authorization.html#enable-the-aci-subsystem">use Apache Directory Studio</a>.</p>
<p>After the server has started, the relevant entry can be found in <em>config.ldif_migrated</em> :</p>
-<div class="codehilite"><pre> <span class="p">:::</span><span class="n">Text</span>
- # <span class="n">default</span><span class="p">,</span> <span class="n">config</span>
- <span class="n">dn</span><span class="p">:</span> <span class="n">ads</span><span class="o">-</span><span class="n">directoryServiceId</span><span class="p">=</span><span class="n">default</span><span class="p">,</span><span class="n">ou</span><span class="p">=</span><span class="n">config</span>
- <span class="n">ads</span><span class="o">-</span><span class="n">directoryserviceid</span><span class="p">:</span> <span class="n">default</span>
- <span class="n">ads</span><span class="o">-</span><span class="n">dssyncperiodmillis</span><span class="p">:</span> 15000
- <span class="n">ads</span><span class="o">-</span><span class="n">dsallowanonymousaccess</span><span class="p">:</span> <span class="n">TRUE</span>
- <span class="n">ads</span><span class="o">-</span><span class="n">dsreplicaid</span><span class="p">:</span> 1
- <span class="n">ads</span><span class="o">-</span><span class="n">dsaccesscontrolenabled</span><span class="p">:</span> <span class="n">FALSE</span>
- <span class="n">ads</span><span class="o">-</span><span class="n">dspasswordhidden</span><span class="p">:</span> <span class="n">FALSE</span>
- <span class="n">ads</span><span class="o">-</span><span class="n">dsdenormalizeopattrsenabled</span><span class="p">:</span> <span class="n">FALSE</span>
- <span class="n">ads</span><span class="o">-</span><span class="n">enabled</span><span class="p">:</span> <span class="n">TRUE</span>
- <span class="n">objectclass</span><span class="p">:</span> <span class="n">top</span>
- <span class="n">objectclass</span><span class="p">:</span> <span class="n">ads</span><span class="o">-</span><span class="n">base</span>
- <span class="n">objectclass</span><span class="p">:</span> <span class="n">ads</span><span class="o">-</span><span class="n">directoryService</span>
+<div class="codehilite"><pre><span class="c"># default, config</span>
+<span class="n">dn</span><span class="p">:</span> <span class="n">ads</span><span class="o">-</span><span class="n">directoryServiceId</span><span class="p">=</span><span class="n">default</span><span class="p">,</span><span class="n">ou</span><span class="p">=</span><span class="n">config</span>
+<span class="n">ads</span><span class="o">-</span><span class="n">directoryserviceid</span><span class="p">:</span> <span class="n">default</span>
+<span class="n">ads</span><span class="o">-</span><span class="n">dssyncperiodmillis</span><span class="p">:</span> 15000
+<span class="n">ads</span><span class="o">-</span><span class="n">dsallowanonymousaccess</span><span class="p">:</span> <span class="n">TRUE</span>
+<span class="n">ads</span><span class="o">-</span><span class="n">dsreplicaid</span><span class="p">:</span> 1
+<span class="n">ads</span><span class="o">-</span><span class="n">dsaccesscontrolenabled</span><span class="p">:</span> <span class="n">FALSE</span>
+<span class="n">ads</span><span class="o">-</span><span class="n">dspasswordhidden</span><span class="p">:</span> <span class="n">FALSE</span>
+<span class="n">ads</span><span class="o">-</span><span class="n">dsdenormalizeopattrsenabled</span><span class="p">:</span> <span class="n">FALSE</span>
+<span class="n">ads</span><span class="o">-</span><span class="n">enabled</span><span class="p">:</span> <span class="n">TRUE</span>
+<span class="n">objectclass</span><span class="p">:</span> <span class="n">top</span>
+<span class="n">objectclass</span><span class="p">:</span> <span class="n">ads</span><span class="o">-</span><span class="n">base</span>
+<span class="n">objectclass</span><span class="p">:</span> <span class="n">ads</span><span class="o">-</span><span class="n">directoryService</span>
</pre></div>
<p>The following ldapmodify (by the admin user) will activate the ACI Subsystem when the server is next restarted :</p>
-<div class="codehilite"><pre> <span class="p">:::</span><span class="n">Text</span>
- <span class="n">dn</span><span class="p">:</span> <span class="n">ads</span><span class="o">-</span><span class="n">directoryServiceId</span><span class="p">=</span><span class="n">default</span><span class="p">,</span><span class="n">ou</span><span class="p">=</span><span class="n">config</span>
- <span class="n">changetype</span><span class="p">:</span> <span class="n">modify</span>
- <span class="n">replace</span><span class="p">:</span> <span class="n">ads</span><span class="o">-</span><span class="n">dsaccesscontrolenabled</span>
- <span class="n">ads</span><span class="o">-</span><span class="n">dsaccesscontrolenabled</span><span class="p">:</span> <span class="n">TRUE</span>
-</pre></div>
+<p><code>dn: ads-directoryServiceId=default,ou=config
+changetype: modify
+replace: ads-dsaccesscontrolenabled
+ads-dsaccesscontrolenabled: TRUE</code></p>
<div class="nav">