Author: buildbot
Date: Wed May 15 16:47:42 2013
New Revision: 862089
Log:
Staging update by buildbot for directory
Added:
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-access-control-specific-area.png
(with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-add-permissions.png
(with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-attributes-definition.png
(with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-example.png
(with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-new-entry.png.png
(with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-prescriptive-aci.png
(with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-rdn-creation.png
(with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-result-entry.png
(with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-subentry-oc.png
(with props)
Modified:
websites/staging/directory/trunk/content/ (props changed)
websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.7.1-enable-authenticated-users-to-browse-and-read-entries.html
Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Wed May 15 16:47:42 2013
@@ -1 +1 @@
-1482945
+1482949
Modified: websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.7.1-enable-authenticated-users-to-browse-and-read-entries.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.7.1-enable-authenticated-users-to-browse-and-read-entries.html
(original)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/4.2.7.1-enable-authenticated-users-to-browse-and-read-entries.html
Wed May 15 16:47:42 2013
@@ -146,13 +146,13 @@
<h2 id="administrationpoint-setup">AdministrationPoint setup</h2>
<p>In our case, the <strong>dc=example,dc=com</strong> context entry has
to contain the <strong>administrativeRole</strong> attribute, with the <strong>accessControlSpecificArea</strong>
value.</p>
<p>Let's first connect to the server using the <strong>admin</strong> user,
and select the <strong>dc=example,dc=com</strong> entry :</p>
-<p>!Screen shot 2010-07-04 at 8.45.09 PM.png|border=1!</p>
+<p><img alt="dc=example.com" src="images/ACI-example.png" /></p>
<p>We will now add the <strong>directoryOperation</strong> attribute <strong>administrativeRole</strong>
to this entry :</p>
<p><img alt="AdministrativeRole new attribute" src="images/ACI-new-attribute.png"
/></p>
-<p>and we select the <em>accessControlSpecificArea</em> value :</p>
-<p>!Screen shot 2010-07-04 at 10.18.49 PM.png|border=1!</p>
+<p>and we select the <strong>accessControlSpecificArea</strong> value :</p>
+<p><img alt="AccessControlSpecificArea" src="images/ACI-access-control-specific-area.png"
/></p>
<p>Here is the resulting entry :</p>
-<p>!Screen shot 2010-07-04 at 10.19.44 PM.png|border=1!</p>
+<p><img alt="Result Entry" src="images/ACI-result-entry.png" /></p>
<h2 id="subentry-addition">Subentry addition</h2>
<p>Now, we have to create a <strong>subentry</strong> in which we will
add the <strong>prescriptiveACI</strong> granting access to all the users.</p>
<p>Let's define the ACI first.</p>
@@ -180,17 +180,39 @@
<p>There are several parameters to this simple ACIItem. Here's a breif
exaplanation of each field and it's meaning or significance.</p>
<table>
-<tr><th> Fields </th><th> Description </th></tr>
-<tr><td> identificationTag </td><td> Identifies the ACIItem within
an entry. </td></tr>
-<tr><td> precedence </td><td> Determine which ACI to apply with conflicting
ACIItems. </td></tr>
-<tr><td> authenticationLevel </td><td> User's level of trust with
values of none, simple,
-strong </td></tr>
-<tr><td> itemOrUserFirst </td><td> Determines order of item permissions
or user
-permissions. </td></tr>
-<tr><td> userClasses </td><td> The set of users the permissions apply
to. </td></tr>
-<tr><td> userPermissions </td><td> Permissions on protected items
</td></tr>
+<thead>
+<tr>
+<th>Fields</th>
+<th>Description</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td>identificationTag</td>
+<td>Identifies the ACIItem within an entry.</td>
+</tr>
+<tr>
+<td>precedence</td>
+<td>Determine which ACI to apply with conflicting ACIItems.</td>
+</tr>
+<tr>
+<td>authenticationLevel</td>
+<td>User's level of trust with values of none, simple, strong</td>
+</tr>
+<tr>
+<td>itemOrUserFirst</td>
+<td>Determines order of item permissions or user permissions.</td>
+</tr>
+<tr>
+<td>userClasses</td>
+<td>The set of users the permissions apply to.</td>
+</tr>
+<tr>
+<td>userPermissions</td>
+<td>Permissions on protected items</td>
+</tr>
+</tbody>
</table>
-
<p>In our case, we want to grant all the users :</p>
<div class="codehilite"><pre><span class="n">userClasses</span> <span
class="o">{</span> <span class="n">allUsers</span> <span class="o">}</span>
</pre></div>
@@ -207,14 +229,14 @@ permissions. </td></tr>
<p>The granted permissions are used to allow the user to browse the tree
-(<strong>grantBrowse</strong>), read the entries (<em>grantRead</em>)
and return the DN for
+(<strong>grantBrowse</strong>), read the entries (<strong>grantRead</strong>)
and return the DN for
aliases (<strong>grantReturnDN</strong>).</p>
<p><a name="2.5.7.1EnableAuthenticatedUserstoBrowseandReadEntries-PrescriptiveACIaddition"></a></p>
<h2 id="prescriptiveaci-addition">PrescriptiveACI addition</h2>
-<p>Now that we have defined the <em>ACIItem</em>, we have to add it into
a <em>subentry</em>
-associated with the <em>administration point</em>. This is just an entry under
the
-<em>administration Point</em>, here, we will call it <em>cn=enableSearchForAllUsers,
-dc=example,dc=com</em>.</p>
+<p>Now that we have defined the <em>A</em>CIItem<strong>, we have
to add it into a </strong>subentry<strong>
+associated with the </strong>administration point<strong>. This is just an entry
under the
+</strong>administration Point<strong>, here, we will call it </strong>cn=enableSearchForAllUsers,
+dc=example,dc=com**.</p>
<p>The entry is described below in a LDIF format :</p>
<div class="codehilite"><pre><span class="nl">dn:</span> <span
class="n">cn</span><span class="o">=</span><span class="n">enableSearchForAllUsers</span><span
class="o">,</span><span class="n">dc</span><span class="o">=</span><span
class="n">example</span><span class="o">,</span><span class="n">dc</span><span
class="o">=</span><span class="n">com</span>
<span class="nl">objectClass:</span> <span class="n">top</span>
@@ -241,23 +263,23 @@ dc=example,dc=com</em>.</p>
<p>}</p>
-<p>It's also easy to create such an entry with <em>Apache Directory Studio</em>.
+<p>It's also easy to create such an entry with <strong>Apache Directory Studio</strong>.
First, right click on the context entry, and select 'new Entry' :</p>
-<p>!Screen shot 2010-07-04 at 11.57.50 PM.png|border=1!</p>
+<p><img alt="New entry" src="images/ACI-new-entry.png" /></p>
<p>Then create a new entry from scratch, and select the 'subentry' and
'accessControlSubentry' ObjectClasses :</p>
-<p>!Screen shot 2010-07-04 at 11.59.28 PM.png|border=1!</p>
+<p><img alt="ObjectClass selection" src="images/ACI-subentry-oc.png" /></p>
<p>Create the RDN for this new entry :</p>
-<p>!Screen shot 2010-07-05 at 12.01.43 AM.png|border=1!</p>
+<p><img alt="Rdn creation" src="images/ACI-rdn-creation.png" /></p>
<p>Pass the subtree editor, we don't need to define anything here, and go to
the Attributes definition :</p>
-<p>!Screen shot 2010-07-05 at 12.03.21 AM.png|border=1!</p>
-<p>The next step is to add the <em>rescriptiveACI</em> value, using the
dedicated
+<p><img alt="Attributes definition" src="images/ACI-attributes-definition.png" /></p>
+<p>The next step is to add the <strong>prescriptiveACI</strong> value,
using the dedicated
editor :</p>
-<p>!Screen shot 2010-07-05 at 12.12.16 AM.png|border=1!</p>
+<p><img alt="PrescriptiveACI addition" src="images/ACI-prescriptive-aci.png" /></p>
<p>When the selection has been done, we have to add the permissions :</p>
-<p>!Screen shot 2010-07-05 at 12.13.47 AM.png|border=1!</p>
-<p>Once done, all the entries under <em>dc=example,dc=com</em> are ruled
by this ACI</p>
+<p><img alt="Add permissions" src="images/ACI-add-permissions.png" /></p>
+<p>Once done, all the entries under <strong>dc=example,dc=com</strong>
are ruled by this ACI</p>
<div class="nav">
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-access-control-specific-area.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-access-control-specific-area.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-add-permissions.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-add-permissions.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-attributes-definition.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-attributes-definition.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-example.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-example.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-new-entry.png.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-new-entry.png.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-prescriptive-aci.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-prescriptive-aci.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-rdn-creation.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-rdn-creation.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-result-entry.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-result-entry.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-subentry-oc.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/ACI-subentry-oc.png
------------------------------------------------------------------------------
svn:mime-type = image/png
|