Configuration Reference Home
OpenDJ Server - Dsee Compat Access Control Handler

Dsee Compat Access Control Handler

The Dsee Compat Access Control Handler provides an implementation that uses syntax compatible with the Sun Java System Directory Server Enterprise Edition access control handlers.

Parent Component

The Dsee Compat Access Control Handler component inherits from the Access Control Handler

Properties

A description of each property follows.


Basic Properties: Advanced Properties:
↓ enabled ↓ java-class
↓ global-aci

Basic Properties

enabled

Description
Indicates whether the Access Control Handler is enabled. If set to FALSE, then no access control is enforced, and any client (including unauthenticated or anonymous clients) could be allowed to perform any operation if not subject to other restrictions, such as those enforced by the privilege subsystem.
Default Value
None
Allowed Values
true
false
Multi-valued
No
Required
Yes
Admin Action Required
None
Advanced Property
No
Read-only
No

global-aci

Description
Defines global access control rules.Global access control rules apply to all entries anywhere in the data managed by the OpenDJ directory server. The global access control rules may be overridden by more specific access control rules placed in the data.
Default Value
No global access control rules are defined, which means that no access is allowed for any data in the server unless specifically granted by access control rules in the data.
Allowed Values
An ACI syntax
Multi-valued
Yes
Required
No
Admin Action Required
None
Advanced Property
No
Read-only
No


Advanced Properties

java-class

Description
Specifies the fully-qualified name of the Java class that provides the Dsee Compat Access Control Handler implementation.
Default Value
org.opends.server.authorization.dseecompat.AciHandler
Allowed Values
A java class that implements or extends the class(es) :
org.opends.server.api.AccessControlHandler
Multi-valued
No
Required
Yes
Admin Action Required
The Dsee Compat Access Control Handler must be disabled and re-enabled for changes to this setting to take effect
Advanced Property
Yes
Read-only
No