| | |
| | | ! CDDL HEADER END |
| | | ! |
| | | ! Copyright 2008-2009 Sun Microsystems, Inc. |
| | | ! Portions Copyright 2011 ForgeRock AS |
| | | ! --> |
| | | <stax> |
| | | |
| | |
| | | <message> |
| | | 'Security: SASL DIGEST-MD5: User (dn:) Binding With ACI with authmethod equal sasl, delete global search ACI' |
| | | </message> |
| | | |
| | | <script> |
| | | global_aci="(targetattr!=\"userPassword||authPassword\")(version 3.0; acl \"Anonymous read access\"; allow (read,search,compare) userdn=\"ldap:///anyone\";)" |
| | | </script> |
| | | |
| | | <call function="'modifyGlobalAci'"> |
| | | { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , |
| | | 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , |
| | | 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , |
| | | 'aciValue' : global_aci , |
| | | 'aciValue' : GLOBAL_ACI_SEARCH , |
| | | 'opType' : 'remove' } |
| | | </call> |
| | | |
| | |
| | | { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , |
| | | 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , |
| | | 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , |
| | | 'aciValue' : global_aci , |
| | | 'aciValue' : GLOBAL_ACI_SEARCH , |
| | | 'opType' : 'add' |
| | | } |
| | | </call> |
| | |
| | | <message> |
| | | 'Security: SASL DIGEST-MD5: User (dn:) Binding With ACI with authmethod equal simple, delete global search ACI' |
| | | </message> |
| | | |
| | | <script> |
| | | global_aci="(targetattr!=\"userPassword||authPassword\")(version 3.0; acl \"Anonymous read access\"; allow (read,search,compare) userdn=\"ldap:///anyone\";)" |
| | | </script> |
| | | |
| | | <call function="'modifyGlobalAci'"> |
| | | { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , |
| | | 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , |
| | | 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , |
| | | 'aciValue' : global_aci , |
| | | 'aciValue' : GLOBAL_ACI_SEARCH , |
| | | 'opType' : 'remove' |
| | | } |
| | | </call> |
| | |
| | | { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , |
| | | 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , |
| | | 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , |
| | | 'aciValue' : global_aci , |
| | | 'aciValue' : GLOBAL_ACI_SEARCH , |
| | | 'opType' : 'add' |
| | | } |
| | | </call> |
| | |
| | | <message> |
| | | 'Security: SASL DIGEST-MD5: User (dn:) Binding With ACI with authmethod not equals simple, delete global search ACI' |
| | | </message> |
| | | |
| | | <script> |
| | | global_aci="(targetattr!=\"userPassword||authPassword\")(version 3.0; acl \"Anonymous read access\"; allow (read,search,compare) userdn=\"ldap:///anyone\";)" |
| | | </script> |
| | | |
| | | <call function="'modifyGlobalAci'"> |
| | | { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , |
| | | 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , |
| | | 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , |
| | | 'aciValue' : global_aci , |
| | | 'aciValue' : GLOBAL_ACI_SEARCH , |
| | | 'opType' : 'remove' |
| | | } |
| | | </call> |
| | |
| | | { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , |
| | | 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , |
| | | 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , |
| | | 'aciValue' : global_aci , |
| | | 'aciValue' : GLOBAL_ACI_SEARCH , |
| | | 'opType' : 'add' |
| | | } |
| | | </call> |
| | |
| | | <message> |
| | | 'Security: SASL DIGEST-MD5: User (dn:) Binding With ACI with authmethod equals none, delete global search ACI' |
| | | </message> |
| | | |
| | | <script> |
| | | global_aci="(targetattr!=\"userPassword||authPassword\")(version 3.0; acl \"Anonymous read access\"; allow (read,search,compare) userdn=\"ldap:///anyone\";)" |
| | | </script> |
| | | |
| | | <call function="'modifyGlobalAci'"> |
| | | { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , |
| | | 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , |
| | | 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , |
| | | 'aciValue' : global_aci , |
| | | 'aciValue' : GLOBAL_ACI_SEARCH , |
| | | 'opType' : 'remove' |
| | | } |
| | | </call> |
| | |
| | | { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , |
| | | 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , |
| | | 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , |
| | | 'aciValue' : global_aci , |
| | | 'aciValue' : GLOBAL_ACI_SEARCH , |
| | | 'opType' : 'add' |
| | | } |
| | | </call> |
| | |
| | | <message> |
| | | 'Delete global search ACI' |
| | | </message> |
| | | |
| | | <script> |
| | | global_aci="(targetattr!=\"userPassword||authPassword\")(version 3.0; acl \"Anonymous read access\"; allow (read,search,compare) userdn=\"ldap:///anyone\";)" |
| | | </script> |
| | | |
| | | <call function="'modifyGlobalAci'"> |
| | | { 'dsInstanceHost' : DIRECTORY_INSTANCE_HOST , |
| | | 'dsInstanceDn' : DIRECTORY_INSTANCE_DN , |
| | | 'dsInstancePswd' : DIRECTORY_INSTANCE_PSWD , |
| | | 'aciValue' : global_aci , |
| | | 'aciValue' : GLOBAL_ACI_SEARCH , |
| | | 'opType' : 'remove' |
| | | } |
| | | </call> |