Skip to content
Permalink
Browse files
code block formatting
git-svn-id: https://svn.apache.org/repos/asf/directory/site/trunk@1871081 13f79535-47bb-0310-9956-ffa450edef68
  • Loading branch information
brianb2 committed Dec 9, 2019
1 parent 6f7dadb commit 166aaf1bebb3ddd67a1e473773d548fab15e0217
Showing 1 changed file with 21 additions and 21 deletions.
@@ -28,26 +28,26 @@ Notice: Licensed to the Apache Software Foundation (ASF) under one
The Access Control Subsystem (ACI) is described in the Basic User Guide. The ACI is disabled by default and the simplest way to enable it is to [use Apache Directory Studio](apacheds/basic-ug/3.2-basic-authorization.html#enable-the-aci-subsystem).

After the server has started, the relevant entry can be found in *config.ldif_migrated* :
````
# default, config
dn: ads-directoryServiceId=default,ou=config
ads-directoryserviceid: default
ads-dssyncperiodmillis: 15000
ads-dsallowanonymousaccess: TRUE
ads-dsreplicaid: 1
ads-dsaccesscontrolenabled: FALSE
ads-dspasswordhidden: FALSE
ads-dsdenormalizeopattrsenabled: FALSE
ads-enabled: TRUE
objectclass: top
objectclass: ads-base
objectclass: ads-directoryService
````

:::Text
# default, config
dn: ads-directoryServiceId=default,ou=config
ads-directoryserviceid: default
ads-dssyncperiodmillis: 15000
ads-dsallowanonymousaccess: TRUE
ads-dsreplicaid: 1
ads-dsaccesscontrolenabled: FALSE
ads-dspasswordhidden: FALSE
ads-dsdenormalizeopattrsenabled: FALSE
ads-enabled: TRUE
objectclass: top
objectclass: ads-base
objectclass: ads-directoryService

The following ldapmodify (by the admin user) will activate the ACI Subsystem when the server is next restarted :
````
dn: ads-directoryServiceId=default,ou=config
changetype: modify
replace: ads-dsaccesscontrolenabled
ads-dsaccesscontrolenabled: TRUE
````

:::Text
dn: ads-directoryServiceId=default,ou=config
changetype: modify
replace: ads-dsaccesscontrolenabled
ads-dsaccesscontrolenabled: TRUE

0 comments on commit 166aaf1

Please sign in to comment.