Skip to content

Commit

Permalink
[#400] Reduce character escaping in example, add note (#413)
Browse files Browse the repository at this point in the history
Co-authored-by: Jesse Coretta <{ID}+{username}@users.noreply.github.com>
  • Loading branch information
JesseCoretta and Jesse Coretta authored Sep 25, 2024
1 parent 7ef912e commit 42e434b
Showing 1 changed file with 19 additions and 13 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -1201,19 +1201,25 @@ The LDAP password modify operation was successful</screen>
example if you use it as the basis for your script.</para>

<screen>$ dsconfig \
set-access-control-handler-prop \
--remove global-aci:\(targetattr!=\"userPassword\|\|authPassword\|\|changes\|\
\|changeNumber\|\|changeType\|\|changeTime\|\|targetDN\|\|newRDN\|\
\|newSuperior\|\|deleteOldRDN\|\|targetEntryUUID\|\|changeInitiatorsName\|\
\|changeLogCookie\|\|includedAttributes\"\)\(version\ 3.0\;\ acl\ \"Anonymous\
\ read\ access\"\;\ allow\ \(read,search,compare\)\
\ userdn=\"ldap:///anyone\"\;\)\
--hostname opendj.example.com \
--port 4444 \
--bindDN cn=Directory\ Manager \
--bindPassword password \
--trustAll \
--no-prompt</screen>
set-access-control-handler-prop \
--remove=global-aci:'(targetattr!="userPassword||authPassword||changes||
changeNumber||changeType||changeTime||targetDN||newRDN||
newSuperior||deleteOldRDN||targetEntryUUID||changeInitiatorsName||
changeLogCookie||includedAttributes")(version 3.0; acl "Anonymous
read access"; allow (read,search,compare) userdn="ldap:///anyone";)' \
--hostname=opendj.example.com \
--port=4444 \
--bindDN=cn=Directory\ Manager \
--bindPassword=password \
--trustAll \
--no-prompt</screen>

<note>The above command sequence utilizes single quote encapsulation
of the "<literal>global-aci</literal>" value. This is simply to avoid
the need for extensive character escapes. If the quotes are removed,
the user will need to manually escape certain characters, such as pipe
(<literal>|</literal>) or exclamation points (<literal>!</literal>) to
avoid shell errors.</note>

<para>If the <literal>global-aci</literal> does not match the ACI exactly
then the command fails to remove the value. An alternative approach is to
Expand Down

0 comments on commit 42e434b

Please sign in to comment.