That works!

Thanks Noriko - much appreciated!

On Fri, Oct 23, 2015 at 4:25 PM, Noriko Hosoi <> wrote:
On 10/23/2015 04:12 PM, Joel Levin wrote:
Hi All:

I inserted the first ACI with an IP Address restriction: tested from all angles but seems to fail when the IP address restricted added.

ACI template:

(targetattr = "foobar") (version 3.0;acl "redcap-svc REDCap SA Read Only";allow (read,compare,search)(userdn = "ldap:///example") and (dns="");)
What happens if you use "ip" instead of "dns" as in this example? ACI "HostedCompany1"

In LDIF, to grant HostedCompany1 full access to their own branch of the directory under the requisite conditions, write the following statement:
     (targetattr= "*") (version 3.0; acl "HostedCompany1";allow (all)
     ou=corporate-clients,dc=example,dc=com") and
     (authmethod="ssl") and (dayofweek="Mon,Tues,Wed,Thu") and (timeofday >= "0800" and
     timeofday <= "1800") and (ip=""); )

Is there an additional configuration to set for IP address restriction to take hold in 389 DS?


389 users mailing list

389 users mailing list