Page created: 22 Jul 2020
|
Page updated: 12 Dec 2022
Both DSEE and PingDirectory Server support global ACIs, which can be used to define ACIs that apply throughout the server. In servers with multiple naming contexts, this feature allows you to define a rule once as a global ACI, rather than needing to maintain an identical rule in each naming context.
In DSEE, global ACIs are created by modifying the root DSE entry to add values of the
aci
attribute. In the PingDirectory Server, global ACIs are
managed with dsconfig referenced in the global-aci
property of the Access Control Handler.