Re: [ApacheDS] Re: Access Restriction

[Emmanuel Lecharny]

On 11/4/11 1:23 PM, Kevin Hamilton wrote:

Hey Oliver,

Thanks so much for your response. I followed your instructions and
still had trouble.

I checked the source of the prescriptive ACI in my new entry. The
source is below.

{
     identificationTag "admin2Tag",
     precedence 0,
     authenticationLevel simple,
     itemOrUserFirst userFirst:
     {
         userClasses
         {
             name { "uid=admin2,ou=system" }
         }
         ,
         userPermissions
         {
             {
                 protectedItems { allUserAttributeTypesAndValues, entry },
                 grantsAndDenials
                 {
                     grantBrowse,
                     grantCompare,
                     grantRename,
                     grantExport,
                     grantRead,
                     grantModify,
                     grantDiscloseOnError,
                     grantFilterMatch,
                     grantImport,
                     grantAdd,
                     grantInvoke,
                     grantRemove,
                     grantReturnDN
                 }
             }
         }
     }
}


When I try to add this, I get a constraint violation that says ERR_277
Attribute userPassword not declared in objectClasses of entry
cn=admin2Test,uid=admin2,ou=system

Can you provide the LDIF for this entry ?


--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com