[Fedora-directory-users] question about host based access control

[Susan]

--- Richard Megginson <rmeggins at redhat.com> wrote:

> You should not need the "account" object class when using the new method.

hmm...   Well, the host attribute does not show up unless I add the account object class.
 It shows up in the global list of attributes and in the schemas

[root at cnyldap01 schema]# grep attributeType * | grep \'host
28pilot.ldif:attributeTypes: ( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'Standard LDAP
attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'RFC 1274' )

but when I click add attribute, it's not there.  Adding account oClass makes the host
attr available.

And I did use the new method, all I did is run this:
ol-schema-migrate.pl /usr/share/doc/nss_ldap-226/ldapns.schema >
/opt/fedora-ds/slapd-localhost/config/schema/61ldapns.ldif

and bounced slapd.  hostobject object class became available but not the host attribute.



		
__________________________________________ 
Yahoo! DSL – Something to write home about. 
Just $16.99/mo. or less. 
dsl.yahoo.com