Bindery Restriction Level

Restricts the rights granted to objects that are security equivalent to the bindery SUPERVISOR.

NDS Operational:Yes

Syntax

Constraints

ASN.1 ID

Used In

(None)

Remarks

For help in understanding the attribute definition template, see Reading NDS Attribute Type Definitions.

This attribute is new in NetWare 5.x and must be added to the class definition of Organization or Organizational Unit. Once added to the class, the attribute can be stored on a container that is part of the bindery context path of a server.

If the attribute is present and the value is nonzero, objects which are equivalent to the server object are restricted to the rights the objects obtain through normal NDS rights inheritance. If this attribute is set to zero or not present, objects which are security equivalent the server object and to the bindery SUPERVISOR are granted all rights to the server object.

For LDAP clients to access this attribute, the LDAP server must be configured to map the attribute to a name without spaces or colons.