0

I'm using ApacheDS and ApacheDS studio. I've written a system that uses Spring-LDAP to manage users and groups. The LDAP account used to read/write groups is admin. The system needs to be deployed now and the sysadmins are guarding admin credentials. I need to have them create a user that has just the read/write privs to CRUD objects within a certain DN only so I can provide that to my app as the manager account. Preferably only certain kinds of objects can be updated by this account, but any object within a restricted DN would work fine.

Improve this question

1 Answer 1

Reset to default
0

See the ApacheDS documentation for Prescriptive ACIs

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .