svn commit: r1053750 - in /websites/staging/directory/trunk/content: ./ apacheds/advanced-ug/4.2.3-enabling-access-control.html

[bu...@apache.org]

Author: buildbot
Date: Sat Dec  7 09:19:13 2019
New Revision: 1053750

Log:
Staging update by buildbot for directory

Modified:
    websites/staging/directory/trunk/content/   (props changed)
    websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.3-enabling-access-control.html

Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Sat Dec  7 09:19:13 2019
@@ -1 +1 @@
-1869716
+1870965

Modified: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.3-enabling-access-control.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.3-enabling-access-control.html (original)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.3-enabling-access-control.html Sat Dec  7 09:19:13 2019
@@ -182,7 +182,26 @@
 }
 h2:hover > .headerlink, h3:hover > .headerlink, h1:hover > .headerlink, h6:hover > .headerlink, h4:hover > .headerlink, h5:hover > .headerlink, dt:hover > .elementid-permalink { visibility: visible }</style>
 <h1 id="423-enabling-access-control">4.2.3 - Enabling Access Control<a class="headerlink" href="#423-enabling-access-control" title="Permanent link">&para;</a></h1>
-<p>TODO...</p>
+<p>The Access Control Subsystem (ACI) is described in the Basic User Guide. The ACI is disabled by default and the simplest way to enable it is to <a href="apacheds/basic-ug/3.2-basic-authorization.html#enable-the-aci-subsystem">use Apache Directory Studio</a>.</p>
+<p>After the server has started, the relevant entry can be found in <em>config.ldif_migrated</em> :
+<code># default, config
+    dn: ads-directoryServiceId=default,ou=config
+    ads-directoryserviceid: default
+    ads-dssyncperiodmillis: 15000
+    ads-dsallowanonymousaccess: TRUE
+    ads-dsreplicaid: 1
+    ads-dsaccesscontrolenabled: FALSE
+    ads-dspasswordhidden: FALSE
+    ads-dsdenormalizeopattrsenabled: FALSE
+    ads-enabled: TRUE
+    objectclass: top
+    objectclass: ads-base
+    objectclass: ads-directoryService</code></p>
+<p>The following ldapmodify (by the admin user) will activate the ACI Subsystem when the server is next restarted :
+<code>dn: ads-directoryServiceId=default,ou=config
+    changetype: modify
+    replace: ads-dsaccesscontrolenabled
+    ads-dsaccesscontrolenabled: TRUE</code></p>
 
 
     <div class="nav">