Red Hat Directory Server 8.0 Administrator's Guide

NOTE
You can change the value of the target DN, but the new DN must be a direct or
indirect child of the selected entry.
If you do not want every entry in the subtree under this node to be targeted by the ACI, enter
a filter in the Filter for Sub-entries field. The filter applies to every entry below the target
entry; for example, setting a filter of ou=Sales means that only entries with ou=Sales in their
DN are returned.
Additionally, you can restrict the scope of the ACI to only certain attributes by selecting the
attributes to target in the attribute list.
6. Click the Hosts tab, then the Add button to open the Add Host Filter dialog box.
Creating a New ACI
207