Return-Path: X-Original-To: apmail-directory-users-archive@www.apache.org Delivered-To: apmail-directory-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 4BCA6102E6 for ; Tue, 25 Mar 2014 20:58:56 +0000 (UTC) Received: (qmail 74118 invoked by uid 500); 25 Mar 2014 20:58:55 -0000 Delivered-To: apmail-directory-users-archive@directory.apache.org Received: (qmail 73917 invoked by uid 500); 25 Mar 2014 20:58:54 -0000 Mailing-List: contact users-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@directory.apache.org Delivered-To: mailing list users@directory.apache.org Received: (qmail 73909 invoked by uid 99); 25 Mar 2014 20:58:53 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 25 Mar 2014 20:58:53 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of pierre.smits@gmail.com designates 209.85.212.178 as permitted sender) Received: from [209.85.212.178] (HELO mail-wi0-f178.google.com) (209.85.212.178) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 25 Mar 2014 20:58:49 +0000 Received: by mail-wi0-f178.google.com with SMTP id bs8so1085666wib.5 for ; Tue, 25 Mar 2014 13:58:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=5fGr4eBtH+rwPwzeO1zLlDUVjJxuL6XzG3NWT9d0n1U=; b=eodBGXgvIfivJPMRn6gW1/UV5l2N1eseRzNzKU5g1mqGSmvT6Qs4dmpTi4gs9TNUlA BIHBgr7cuNkNNiENE/06Dwx8IFqRtPhVFbjolDcIgWsdaTA8mpULyVctYlBHSFeVi0EN vvKdcJdDzSufwSsis2XqY1nYuih6q2g4Tr0JqfMsjLQkyXWUVTm1aQ+iBXaB+lNSlA3/ h17M0bhJybp+0I5HoDxlgpslO7xIZbAiKjwYf98SjpuHQ1q59Kk/Th5YbQk0GC6oTk9U SCXG/JGrljfuUzjYqExoIx4dYIf5FddnYcFbhSfwF76vs7w99HPSq6JP4akBqsGKDfmJ wY+w== MIME-Version: 1.0 X-Received: by 10.180.108.199 with SMTP id hm7mr26493965wib.1.1395781108206; Tue, 25 Mar 2014 13:58:28 -0700 (PDT) Received: by 10.217.115.6 with HTTP; Tue, 25 Mar 2014 13:58:28 -0700 (PDT) In-Reply-To: <5331EBA9.7080801@gmail.com> References: <5331EBA9.7080801@gmail.com> Date: Tue, 25 Mar 2014 21:58:28 +0100 Message-ID: Subject: Re: AD M16 and Studio M2: deleting ACI generates error From: Pierre Smits To: Apache Directory Users List Content-Type: multipart/alternative; boundary=e89a8f3bae5d2391a504f5749d62 X-Virus-Checked: Checked by ClamAV on apache.org --e89a8f3bae5d2391a504f5749d62 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable The content is: dn: cn=3DorrtizAuthReqACISubEntry,dc=3Dorrtiz,dc=3Dcom objectClass: top objectClass: accessControlSubentry objectClass: subentry cn: orrtizAuthReqACISubEntry prescriptiveACI: { identificationTag "directoryManagerFullAccessACI", prece= d ence 11, authenticationLevel simple, itemOrUserFirst userFirst: { userClas= s es { name { "cn=3Dnl04748,ou=3Dusers,dc=3Dorrtiz,dc=3Dcom" } }, userPermis= sions { { protectedItems { allUserAttributeTypesAndValues, entry }, grantsAndDenial= s { grantReturnDN, grantFilterMatch, grantBrowse, grantCompare, grantAdd, g= r antInvoke, grantModify, grantImport, grantDiscloseOnError, grantRename, gr= a ntRemove, grantRead, grantExport } } } } } prescriptiveACI: { identificationTag "allUsersACI", precedence 10, authenti= c ationLevel none, itemOrUserFirst userFirst: { userClasses { allUsers }, us= e rPermissions { { protectedItems { allUserAttributeTypesAndValues, entry }, grantsAndDenials { grantReturnDN, grantFilterMatch, grantBrowse, grantComp= a re, grantDiscloseOnError, grantRead } }, { protectedItems { attributeType = { userPassword } }, grantsAndDenials { denyRead, denyFilterMatch, denyCompa= r e } } } } } subtreeSpecification: { base "dc=3Dorrtiz,dc=3Dcom" } accessControlSubentries: 2.5.4.3=3Dorrtizacisubentry,0.9.2342.19200300.100.= 1.2 5=3Dorrtiz,0.9.2342.19200300.100.1.25=3Dcom createTimestamp: 20140325182443.296Z creatorsName: 0.9.2342.19200300.100.1.1=3Dadmin,2.5.4.11=3Dsystem entryCSN: 20140325200009.087000Z#000000#001#000000 entryDN: cn=3DorrtizAuthReqACISubEntry,dc=3Dorrtiz,dc=3Dcom entryParentId: a22442b4-f41f-46bb-89d8-e567ed1a5800 entryUUID:: MWViMTQxMDktNzEzOC00NzFkLTlmYzEtZTgyMTM1NzI1ZDU1 modifiersName: 0.9.2342.19200300.100.1.1=3Dadmin,2.5.4.11=3Dsystem modifyTimestamp: 20140325200009.087Z Regards, Pierre Smits *ORRTIZ.COM * Services & Solutions for Cloud- Based Manufacturing, Professional Services and Retail & Trade http://www.orrtiz.com On Tue, Mar 25, 2014 at 9:48 PM, Emmanuel L=E9charny w= rote: > Le 3/25/14 9:45 PM, Pierre Smits a =E9crit : > > Hi all, > > > > When I tried to delete an ACI I got the following error: > > > What is the content of the subentry ? > > > > -- > Regards, > Cordialement, > Emmanuel L=E9charny > www.iktek.com > > --e89a8f3bae5d2391a504f5749d62--