PingDirectory

Assigning additional privileges for administrators

Steps

  • To allow access to the Tasks backend, set up a global access control instruction (ACI) using dsconfig that allows access to members of an Administrators group.

    Example:

    $ dsconfig set-access-control-handler-prop \
  --add 'global-aci:(target="ldap:///cn=tasks")(targetattr="*||+")
        (version 3.0; acl "Access to the tasks backend for administrators";
         allow (all) groupdn="ldap:///
         cn=admins,ou=groups,dc=example,dc=com";)'