HP-UX Directory Server 8.1 administrator guide

Index
A
access control
ACI attribute, 233
ACI syntax, 236
allowing or denying access, 241
and replication, 291
and schema checking, 238
anonymous access, 245
bind rules, 243
access at specific time or day, 253
access based on value matching, 249
general access, 245
user and group access, 244
Boolean bind rules, 255
compatibility with earlier versions, 291
creating from console, 256
dynamic targets, 245
from specific domain, 252
from specific IP address, 252
logging information, 274
overview, 233
permissions, 241
placement of ACIs, 234
rights, 241
roles, 187
SASL authentication, 254
simple authentication, 254
SSL authentication, 254
structure of ACIs, 233
target DN
containing comma, 237
target DN containing comma, 286
targeting, 236
targeting attribute values, 240
targeting attributes, 238
targeting entries, 237
targeting using filters, 239
using the Access Control Editor, 256
value matching, 249
viewing
Access Control Editor, 264
get effective rights, 264
Access Control Editor
displaying, 256
access control instruction (ACI). See ACI, 233
access log
configuring, 513
manually rotating, 516
turning off, 513
turning on, 513
viewing, 513
account inactivation, 304
from command line, 304
from console, 304
account inactivity policy
configuring, 316
managing, 317
provisioning, 317
account lockout, 302
configuration
attributes, 302
configuring, 301
using command line, 302
using console, 302
disabling, 302
enabling, 302
lockout duration, 302
password failure counter, 302
replicating attributes, 379
account policy plug-in
setting inactivity limits, 315
ACI
assessment, 233
attribute, 234
authmethod keyword, 254
bind rules, 236
cascading chaining, 83
creating from console, 258
dayofweek keyword, 253
deleting from console, 263
dns keyword, 252
editing from console, 263
evaluation, 234
examples of use, 274
groupdn keyword, 247
inheritance, 250
ip keyword, 252
local evaluation
cascading chaining, 84
name, 236
permissions, 236
precedence rule, 234
proxy rights example, 286
replication, 291
rights, 241
roledn keyword, 248
structure, 233
syntax, 236
targattrfilters keyword, 240
target, 236
target DN
containing comma, 237
target DN containing comma, 286
target keywords, 237
target overview, 236
targetattr keyword, 238
targetfilter keyword, 239
userattr and parent, 250
userattr keyword, 249
using macro ACIs, 287
value-based, 240
587