mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git

Mark Craig
24.20.2012 4bdf2c34ae5727c6f0e3d3d1f07299cbb4fe90d2
Fix for OPENDJ-550: Broken example 5.2 in OpenDJ Admin Guide

Thanks to Bernhard Thalmayr for spotting the issue.
1 files modified
30 ■■■■ changed files
opendj3/src/main/docbkx/admin-guide/chap-privileges-acis.xml 30 ●●●● patch | view | raw | blame | history
opendj3/src/main/docbkx/admin-guide/chap-privileges-acis.xml
@@ -956,22 +956,22 @@
   <command>dsconfig set-access-control-handler-prop</command> command.</para>
   <para>First, remove the <literal>global-aci</literal> attribute value that
   allows anonymous read access. The <literal>global-aci</literal> attribute
   value should all be on one line.</para>
   allows anonymous read access. Do not wrap the lines in the following
   example if you use it as the basis for your script.</para>
   <screen>dsconfig
 set-access-control-handler-prop
 --remove global-aci:\(targetattr!=\"userPassword\|\|authPassword\|\|changes\|
  \|changeNumber\|\|changeType\|\|changeTime\|\|targetDN\|\|newRDN\|
  \|newSuperior\|\|deleteOldRDN\|\|targetEntryUUID\|\|changeInitiatorsName\|
  \|changeLogCookie\|\|includedAttributes\"\)\(version\ 3.0\;\ acl\ \"Anonymous
  \ read\ access\"\;\ allow\ \(read,search,compare\)
  \ userdn=\"ldap:///anyone\"\;\)
 --hostname opendj.example.com
 --port 4444
 --bindDN cn=Directory\ Manager
 --bindPassword password
 --trustAll
   <screen>$ dsconfig \
 set-access-control-handler-prop \
 --remove global-aci:\(targetattr!=\"userPassword\|\|authPassword\|\|changes\|\
\|changeNumber\|\|changeType\|\|changeTime\|\|targetDN\|\|newRDN\|\
\|newSuperior\|\|deleteOldRDN\|\|targetEntryUUID\|\|changeInitiatorsName\|\
\|changeLogCookie\|\|includedAttributes\"\)\(version\ 3.0\;\ acl\ \"Anonymous\
\ read\ access\"\;\ allow\ \(read,search,compare\)\
\ userdn=\"ldap:///anyone\"\;\)\
 --hostname opendj.example.com \
 --port 4444 \
 --bindDN cn=Directory\ Manager \
 --bindPassword password \
 --trustAll \
 --no-prompt</screen>
   <para>If the <literal>global-aci</literal> does not match the ACI exactly