Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using ApacheDS and ApacheDS studio. I've written a system that uses Spring-LDAP to manage users and groups. The LDAP account used to read/write groups is admin. The system needs to be deployed now and the sysadmins are guarding admin credentials. I need to have them create a user that has just the read/write privs to CRUD objects within a certain DN only so I can provide that to my app as the manager account. Preferably only certain kinds of objects can be updated by this account, but any object within a restricted DN would work fine.

share|improve this question
up vote 0 down vote accepted

See the ApacheDS documentation for Prescriptive ACIs

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.