You can create aci's that restrict specific DN's from doing specific actions like ADD.  Is that what you mean?  If so, look at the Admin guide for more information:

https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/administration_guide/managing_access_control

HTH,

Mark

Hi,

is there a way how to provide 389DS with list of forbidden uid to prevent creating such user? For example 'root', 'sys', ...

Thanks

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

-- 

389 Directory Server Development Team