HP-UX Directory Server 8.1 Administrator (766147-001, March 2014)

Index
A
access control
ACI attribute, 233
ACI syntax, 236
allowing or denying access, 241
and replication, 290
and schema checking, 238
anonymous access, 245
bind rules, 243
access at specific time or day, 253
access based on value matching, 248
general access, 245
user and group access, 244
Boolean bind rules, 255
compatibility with earlier versions, 290
creating from console, 255
dynamic targets, 245
from specific domain, 252
from specific IP address, 252
logging information, 273
overview, 233
permissions, 241
placement of ACIs, 234
rights, 241
roles, 188
SASL authentication, 254
simple authentication, 254
SSL authentication, 254
structure of ACIs, 233
target DN
containing comma, 237
target DN containing comma, 285
targeting, 236
targeting attribute values, 240
targeting attributes, 238
targeting entries, 237
targeting using filters, 239
using the Access Control Editor, 255
value matching, 248
viewing
Access Control Editor, 263
get effective rights, 263
Access Control Editor
displaying, 256
access control instruction (ACI). See ACI, 233
access log
configuring, 511
manually rotating, 514
turning off, 511
turning on, 511
viewing, 511
account inactivation, 302
from command line, 302
from console, 302
account inactivity policy
configuring, 315
managing, 316
provisioning, 316
account lockout, 300
configuration
attributes, 300
configuring, 299
using command line, 300
using console, 300
disabling, 300
enabling, 300
lockout duration, 300
password failure counter, 300
replicating attributes, 378
account policy plug-in
setting inactivity limits, 314
ACI
assessment, 233
attribute, 234
authmethod keyword, 254
bind rules, 236
cascading chaining, 81
creating from console, 257
dayofweek keyword, 253
deleting from console, 262
dns keyword, 252
editing from console, 262
evaluation, 234
examples of use, 273
groupdn keyword, 247
inheritance, 250
ip keyword, 252
local evaluation
cascading chaining, 82
name, 236
permissions, 236
precedence rule, 234
proxy rights example, 285
replication, 290
rights, 241
roledn keyword, 248
structure, 233
syntax, 236
targattrfilters keyword, 240
target, 236
target DN
containing comma, 237
target DN containing comma, 285
target keywords, 237
target overview, 236
targetattr keyword, 238
targetfilter keyword, 239
userattr and parent, 250
userattr keyword, 249
using macro ACIs, 286
value-based, 240
587