6.6. Viewing ACIs

6.6. Viewing ACIs

All the ACIs under a single suffix in the directory can be viewed from the command line by using the following ldapsearch command: [5] 

ldapsearch -h host -p port -b baseDN -D rootDN -w rootPassword (aci=*) aci

See the Directory Server Configuration, Command, and File Reference for information on using the ldapsearch utility.

From the Directory Server Console, all of the ACIs that apply to a particular entry can be viewed through the Access Control Manager.

  1. Start the Directory Server Console. See Section 1.4, “Starting the Directory Server Console”.

  2. In the Directory tab, right-click the entry in the navigation tree, and select Set Access Permissions.

    The Access Control Manager opens with a list of the ACIs belonging to the selected entry.

  3. Check the Show Inherited ACIs checkbox to display all ACIs created on entries above the selected entry that also apply.


[5] The LDAP tools referenced in this guide are Mozilla LDAP, installed with Directory Server in the /usr/lib/mozldap directory on Red Hat Enterprise Linux 5 i386; directories for other platforms are listed in Section 1.2, “LDAP Tool Locations”. However, Red Hat Enterprise Linux systems also include LDAP tools from OpenLDAP. It is possible to use the OpenLDAP commands as shown in the examples, but you must use the -x argument to disable SASL and allow simple authentication.


Note: This documentation is provided {and copyrighted} by Red Hat®, Inc. and is released via the Open Publication License. The copyright holder has added the further requirement that Distribution of substantively modified versions of this document is prohibited without the explicit permission of the copyright holder. The CentOS project redistributes these original works (in their unmodified form) as a reference for CentOS-5 because CentOS-5 is built from publicly available, open source SRPMS. The documentation is unmodified to be compliant with upstream distribution policy. Neither CentOS-5 nor the CentOS Project are in any way affiliated with or sponsored by Red Hat®, Inc.