Hi,

Please, use iplanet.server.directory for future postings about iPlanet
Directory Server 5.0 (it is available from news.mozilla.org).

> I added the following ACI but got the same response as I did not set
> it before.
> (targetattr = "*")
> (version 3.0;
> acl "NMS users only";
> allow (all)
> (userdn = "ldap:///all";)
> ;)

deny statements take precedence over allow, so check that the tree you want
to read does not have any ACI which would override the above ACI.

> My friend even wrote a small JAVA code for this purpose.  When
> anonymous is allowed I get attributes but if it is removed, I get
> nothing, not even error code.

That's normal. It is not a bug, it is a feature.

Bertold




Reply via email to