Accessing and Modifying Server ConfigurationChapter 2 Core Server Configuration Reference 29Code Example 2-3 Default ACIs in dse.ldifThese default ACIs allow all LDAP operations to be carried out on all configurationattributes by the following users:• Members of the Configuration Administrators Group,• The user acting as the Administrator, who has the uid admin that can beconfigured at installation time,• Members of local Directory Administrators Group• The local Directory Administrator (root DN)• The SIE (Server Instance Entry) Group that is usually assigned using the SetAccess Permissions from the main topology view in the main console.For more information on Access Control see Chapter 5 of the Netscape DirectoryServer Administrator’s Guide.Changing Configuration AttributesYou can view and change server attribute values in one of three ways. You makethe changes by using LDAP through Netscape Console, by performing ldapsearchand ldapmodify commands or by manually editing the dse.ldif file.aci: (targetattr = "*")(version 3.0; acl "ConfigurationAdminstrators Group"; allow (all)groupdn = "ldap:///cn=Configuration Administrators,ou=Groups,ou=TopologyManagement, o=NetscapeRoot";)aci: (targetattr = "*")(version 3.0; acl "ConfigurationAdminstrator"; allow (all)userdn = "ldap:///uid=admin,ou=Administrators,ou=TopologyManagement, o=NetscapeRoot";)aci: (targetattr = "*")(version 3.0; acl "Local DirectoryAdminstrators Group"; allow (all)groupdn = "ldap:///ou=Directory Administrators,dc=example,dc=com";)aci: (targetattr = "*")(version 3.0; acl "SIE Group"; allow(all)groupdn = "ldap:///cn=slapd-phonebook, cn=Netscape DirectoryServer, cn=Server Group, cn=phonebook.example.com,dc=example,dc=com, o=NetscapeRoot";)
