Novell Home

My Favorites

Close

Please to see your favorites.

LDAP Proxy User Minimum rights for the iChain

(Last modified: 03Aug2004)

This document (10084506) is provided subject to the disclaimer at the end of this document.

fact

iChain 2.2

iChain 2.3

goal

LDAP Proxy User Minimum rights for the iChain

fix

1)  Requires Browse Object Entry Rights plus Read and Compare rights to All attributes and the Root (or Tree) container.
2)  Make the LDAP Proxy User a trustee of the user's container (or ROOT) and give it a specific assignment of Read, Compare and Write rights to the Object Class property.
3)  The LDAP Proxy User will also need Write rights to the ISO object for license activation.
4)  The LDAP user must also have read and write rights to all users (user's containers).
5)  The LDAP Proxy User must have WRITE rights to the iChainFormFillCrib attribute of the user object if you are using iChain's FormFill feature.  Otherwise, the LDAP Proxy User could just have read rights to the user objects.

 

Trustees of which Object

Add Trustee

Object Entry Rights

Attribute Rights

Specific Attribute Name

Inheritable

Root (or Tree) Container

ichainadmin

B

RC

All

Y

Root or User Container

ichainadmin

B

RCW

Object Class Property

Y

Root or User Container

ichainadmin

B

RCW

iChainFormFillCrib

Y

User Container

ichainadmin

B

RCW

All

Y

ISO Object

ichainadmin

B

RCW

All

N

 

.

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

  • Document ID:
  • 10084506
  • Solution ID: NOVL90508
  • Creation Date: 25Jun2003
  • Modified Date: 03Aug2004
    • NovellConnectivity Products

      exteNd

Did this document solve your problem? Provide Feedback