addDomainACL

Adds an eDirectory ACL for the specified domain at the specified context. This ACL gives rights to the domain's controller group to be able to work with users from a different part of the eDirectory tree. The ACL gives read/write privileges to the CIFS Login Script and RID attributes in user, group, container, and profile objects, which allows the controllers to manipulate these attributes at the specified context and below it in the tree.

Request

<addDomainACL>
   <domain/>
   <context/>
   <unp/>
   <user/>
   <password/>
</addDomainACL>

Reply

<addDomainACL>             
   <result value=" ">
      <description/>
   </result>
</addDomainACL>

Elements

domain: Specifies the eDirectory name (in typeless, distinguished-name format) of the domain object that represents the domain for which an ACL is to be added.
context: Specifies the eDirectory name (in typeless, distinguished-name format) of the tree context where the ACL is to be added.
unp: (Optional) Specifies the NMAS-encrypted username and password that has rights to perform the operation at the specified context.
user: (Optional) Specifies the clear-text user name of a user that has rights to perform the operation. This element is used only if the unp element is not specified.
password: (Optional/Required if user is specified) Specifies the clear-text password of a user that has rights to perform the operation.
result: Specifies a zError or eDirectory value or 0 (for no error).
description: Specifies a text description of the result.