'[Fedora-directory-users] Group ACLs??'

[prev in list] [next in list] [prev in thread] [next in thread] 

List: fedora-directory-users
Subject: [Fedora-directory-users] Group ACLs??
From: "Singh Raina, Ajeet" <ajeet.singh.raina () logicacmg ! com>
Date: 2008-02-19 12:40:19
Message-ID: 0139539A634FD04A99C9B8880AB70CB207C90085 () in-ex004 ! groupinfra ! com
[Download RAW message or body]

Hi  Guys,

I have been playing around with Netgroup ACL but went into confusion.All
I need now is Setting Up ACI for Groups.

I Have 2 Groups - buildadm and agiledev. Around 50 users are in agiledev
and 30 in buildadm.Now I tried to create the following ACL on buildadm
through Fedora DS Console as:

(targetattr = "*") (target =
"ldap:///cn=buildadm,ou=Groups,dc=im,dc=logica,dc=com") (version 3.0;acl
"<Unnamed ACI>";deny (all)(groupdn =
"ldap:///cn=agiledev,ou=Groups,dc=im,dc=logica,dc=com") and
(ip="10.14.242.*");)

All it means is no user from Agiledev /IP address: 10.14.242.93  is
allowed to login or access to Buildadm. Right ?

Does it mean that?

This e-mail and any attachment is for authorised use by the intended recipient(s) \
only. It may contain proprietary material, confidential information and/or be subject \
to legal privilege. It should not be copied, disclosed to, retained or used by, any \
other party. If you are not an intended recipient then please promptly delete this \
e-mail and any attachment and all copies and inform the sender. Thank you.

[Attachment #3 (text/html)]

<html xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns="http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:Arial;
	color:windowtext;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
	{page:Section1;}
-->
</style>

</head>

<body lang=EN-US link=blue vlink=purple>

<div class=Section1>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hi &nbsp;Guys,<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I have been playing around with Netgroup ACL but went into
confusion.All I need now is Setting Up ACI for Groups.<o:p></o:p></span></font></p>

I Have 2 Groups &#8211; buildadm and agiledev. Around 50
users are in agiledev&nbsp; and 30 in buildadm.Now I tried to create the following
ACL on buildadm through Fedora DS Console as:<o:p></o:p>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>(targetattr = &quot;*&quot;) (target =
&quot;ldap:///cn=buildadm,ou=Groups,dc=im,dc=logica,dc=com&quot;) (version
3.0;acl &quot;&lt;Unnamed ACI&gt;&quot;;deny (all)(groupdn =
&quot;ldap:///cn=agiledev,ou=Groups,dc=im,dc=logica,dc=com&quot;) and
(ip=&quot;10.14.242.*&quot;);)<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

All it means is no user from Agiledev /IP address: 10.14.242.93
&nbsp;is &nbsp;allowed to login or access to Buildadm. Right \
?<o:p></o:p>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Does it mean that?<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

</div>

This e-mail and any attachment is for authorised use by the intended \
recipient(s) only. It may contain proprietary material, confidential information \
and/or be subject to legal privilege. It should not be copied, disclosed to, retained \
or used by, any other party. If you are not an intended recipient then please \
promptly delete this e-mail and any attachment and all copies and inform the sender. \
Thank you.

</body>

</html>

--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users

--===============1586668095==--

[prev in list] [next in list] [prev in thread] [next in thread] 