Return-Path: Delivered-To: apmail-directory-users-archive@www.apache.org Received: (qmail 13394 invoked from network); 2 May 2007 18:44:36 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 2 May 2007 18:44:36 -0000 Received: (qmail 71446 invoked by uid 500); 2 May 2007 18:44:43 -0000 Delivered-To: apmail-directory-users-archive@directory.apache.org Received: (qmail 71431 invoked by uid 500); 2 May 2007 18:44:43 -0000 Mailing-List: contact users-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@directory.apache.org Delivered-To: mailing list users@directory.apache.org Received: (qmail 71416 invoked by uid 99); 2 May 2007 18:44:43 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 May 2007 11:44:42 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of martin.marcher@gmail.com designates 66.249.90.176 as permitted sender) Received: from [66.249.90.176] (HELO ik-out-1112.google.com) (66.249.90.176) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 May 2007 11:44:33 -0700 Received: by ik-out-1112.google.com with SMTP id b35so238305ika for ; Wed, 02 May 2007 11:44:12 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=dGZet1m4JO1x9rWF852mA4uNMNZwrgqNT+ZuAYorRF16zLaf2cantkdeYnMka9VRUK8QY0syqE58HcJxcFQ28phHLDYGRmYsWTXNLca7/LnBPlUtlLClZmuoRKhGbc5weYfjjOGrZoD02p/FLJt2cY2vnmfvY+7q2ynFZn7LmlU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Jto3bD1UJKJBMhzvaBqq8id2l2P6RwXJcCnk+yQM5xuEK4txI1bNfuskx3cFe1PvVARjs7o7aCm4YPdV3IJpJ83uhMAvnc8x45ZLdP2Yt/sh3dU9IdbMmDeGCI8dIBku0P4MQBw/NZ6exXmb4hcETUuV2WV2qO3nUXtAsZuOlkU= Received: by 10.82.150.20 with SMTP id x20mr1963859bud.1178131452319; Wed, 02 May 2007 11:44:12 -0700 (PDT) Received: by 10.82.157.10 with HTTP; Wed, 2 May 2007 11:44:12 -0700 (PDT) Message-ID: Date: Wed, 2 May 2007 20:44:12 +0200 From: "Martin Marcher" To: users@directory.apache.org Subject: Re: ACI with self and posixAccount In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <4637A236.30702@labeo.de> X-Virus-Checked: Checked by ClamAV on apache.org Hello, thanks for the answers. Also the note on grantAdd for userPassword was something I probably wouldn't have thought of. m-disabled did the trick for posixAccount. Still having a few problems with the ACIs but now that i know of "thisEntry" I got a few steps further and the ACIs are something I can step by step expand and test until it fits my needs. On 5/2/07, Alex Karasulu wrote: > On 5/1/07, Stefan Zoerner wrote: > > Your problem is not related to LDAP Studio. The same holds true for > > Softerra LDAP Administrator and JXplorer as well. You have to enable the > > NIS schema explicitly. Simply set the m-disabled attribute value of the > > "cn=nis,ou=schema" entry to FALSE. You have to reload the schema in LDAP > > studio to see the effect in the Schema Browser. > > > Oh btw you can also just delete the "m-disabled" attribute. By default a > schema > is enabled. > > Greetings from Amsterdam, > Alex > -- Martin Marcher martin.marcher@gmail.com http://www.mycorners.com https://www.xing.com/profile/Martin_Marcher http://www.linkedin.com/in/martinmarcher http://www.studivz.net/profile.php?ids=9f83ea8c5996b8ec http://www.amazon.de/gp/registry/wishlist/3KDAGCL2NKOIM/ref=reg_hu-wl_goto-registry/302-4432803-5146435?ie=UTF8&sort=date-added