mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git

Jesse Coretta
25.20.2024 42e434b5a7188485df84803e90d3829a01968cf2
[#400] Reduce character escaping in example, add note  (#413)

Co-authored-by: Jesse Coretta <{ID}+{username}@users.noreply.github.com>
1 files modified
26 ■■■■■ changed files
opendj-doc-generated-ref/src/main/docbkx/admin-guide/chap-privileges-acis.xml 26 ●●●●● patch | view | raw | blame | history
opendj-doc-generated-ref/src/main/docbkx/admin-guide/chap-privileges-acis.xml
@@ -1202,19 +1202,25 @@
   <screen>$ dsconfig \
 set-access-control-handler-prop \
 --remove global-aci:\(targetattr!=\"userPassword\|\|authPassword\|\|changes\|\
\|changeNumber\|\|changeType\|\|changeTime\|\|targetDN\|\|newRDN\|\
\|newSuperior\|\|deleteOldRDN\|\|targetEntryUUID\|\|changeInitiatorsName\|\
\|changeLogCookie\|\|includedAttributes\"\)\(version\ 3.0\;\ acl\ \"Anonymous\
\ read\ access\"\;\ allow\ \(read,search,compare\)\
\ userdn=\"ldap:///anyone\"\;\)\
 --hostname opendj.example.com \
 --port 4444 \
 --bindDN cn=Directory\ Manager \
 --bindPassword password \
--remove=global-aci:'(targetattr!="userPassword||authPassword||changes||
changeNumber||changeType||changeTime||targetDN||newRDN||
newSuperior||deleteOldRDN||targetEntryUUID||changeInitiatorsName||
changeLogCookie||includedAttributes")(version 3.0; acl "Anonymous
 read access"; allow (read,search,compare) userdn="ldap:///anyone";)' \
--hostname=opendj.example.com \
--port=4444 \
--bindDN=cn=Directory\ Manager \
--bindPassword=password \
 --trustAll \
 --no-prompt</screen>
   <note>The above command sequence utilizes single quote encapsulation
   of the "<literal>global-aci</literal>" value. This is simply to avoid
   the need for extensive character escapes.  If the quotes are removed,
   the user will need to manually escape certain characters, such as pipe
   (<literal>|</literal>) or exclamation points (<literal>!</literal>) to
   avoid shell errors.</note>
   <para>If the <literal>global-aci</literal> does not match the ACI exactly
   then the command fails to remove the value. An alternative approach is to
   use the <command>dsconfig</command> command interactively, adding the