This ACI is automatically added to each root entry when the
passwordChange global password policy is set to off (in the GUI, when
"User may change password" is unchecked).
Omer Faruk Sen wrote:
Hi,
I have installed fedora-ds 1.0.4 to Fedora 6 server. I am trying to install mail ldap
cluster. I have added a domain like dc=my,dc=domain,dc=com and added a virtual domain like
ou=virtdomain.com,dc=my,dc=domain,dc=com after adding a user like:
uid=user,ou=virtdomain.com,dc=my,dc=domain,dc=com
and changing its password gives me that error:
aci: (targetattr = "userPassword") ( version 3.0; acl
"disallow_pw_change_aci"; deny (write ) userdn = "ldap:///self";)
I have read
http://www.redhat.com/docs/manuals/dir-server/ag/7.1/acl.html and added an
aci like:
aci: (targetattr="userPassword || homePhone ||
homePostalAddress") (version 3.0; acl "Write my.domain.com"; allow
(write) userdn= "ldap:///self";)
for ou=virtdomain.com,dc=my,dc=domain,dc=com
But I still get aci: (targetattr = "userPassword") ( version 3.0; acl
"disallow_pw_change_aci"; deny (write ) userdn = "ldap:///self";)
error. How can I disable disallow_pw_change aci since I couldn't find this aci
anywhere using directory admin gui.
By the way I think this comes from userRoot database. But I can't find a place to
disable disallow_pw_change
Best Regards,
____________________________________________________________________________________
Get the free Yahoo! toolbar and rest assured with the added security of spyware
protection.
http://new.toolbar.yahoo.com/toolbar/features/norton/index.php
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users