Specifications

Chapter 9 Maintaining Open Directory Services 183
5 To see other types of records, click the All Records button next to the Computer Group
button, and choose a record type from the pop-up menu at the top of the list.
The pop-up menu lists all standard record types that exist in the directory domain. You
can also choose Native from the pop-up menu and enter the name of a native record
in the box that appears below the pop-up menu. The list displays all records, including
predened records, of the record type.
Hiding the Directory Inspector
If the Inspector is visible in Workgroup Manager, you can hide it by changing an option
in Workgroup Manager Preferences.
To hide the Inspector:
1 Open Workgroup Manager.
2 Choose Workgroup Manager > Preferences.
3 Deselect “Show All Records’ tab and inspector” and click OK.
Setting LDAP Access Control Lists (ACLs)
Open Directory enables you to dene directory access control lists (ACLs) to the LDAP
directory, providing control of who has permission to change what. Open Directory
stores ACLs in the olcAccess attribute in olcBDBCong record that you can edit using
the Inspector in Workgroup Manager.
To change LDAP ACLs:
1 Open Workgroup Manager and make the Inspector visible if it is hidden.
For more information, see “Showing the Directory Inspector” on page 182.
2 Open the directory domain whose access controls you want to set, and authenticate as
an administrator of the domain.
To open a directory domain, click the small globe icon above the list of users and
choose from the pop-up menu.
3 Click the All Records button (next to the Computer Group button) and then from the
pop-up menu choose OLCBDBCong.
4 In the list of records, select “{1}bdb.”
5 In the list of attributes, select dsAttrTypeNative:olcAccess and if a triangle appears next
to dsAttrTypeNative:olcAccess, click the triangle to see access control entries.
6 Select an access control entry, then click Edit to change the value or click New Value to
add an access control entry value.
You can also double-click a value to edit it in place.
7 Click Save.