[389-users] ACI help

[Josh Ellsworth]

I am trying to grant a specific group the ability to edit one attribute. I have the following ACI in place with no success:

(targetattr ="description")(version 3.0;acl "evolvadmins description modify";allow(all) (groupdn = "ldap:///cn=evolvadmins,ou=Groups,dc=evolv,dc=com");)

Any ideas what I need to do? Any good guides to troubleshooting and writing ACIs?

Josh

--
Joshua Ellsworth
Senior Systems Administrator, Primatics Financial
Phone: 571.765.7528
jellsworth at primaticsfinancial.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20120917/2fb4dea6/attachment.html>