Chapter 5. Managing Entries with Roles, Classes of Service, and Views
128
3. Right-click on the CoS and select
New > Other
.
4. Select
cosTemplate
from the list of object classes.
NOTE
The
LDAPsubentry
object class can be added to a new template entry. Making the
CoS template entry an instance of the
LDAPsubentry
object class allows ordinary
searches to be performed unhindered by the configuration entries. However, if the
template entry already exists and is used for something else (for example, if it is
a user entry), the
LDAPsubentry
object class does not need to be added to the
template entry.
5. The
Property Editor
opens.
6. Select the object classes attribute, and hit
Add Value
. Add the
extensibleObject
object class.
This makes it possible to add any attribute available in the directory.
7. Click on the
Add Attribute
button.
Add the
cn
attribute, and give it a value that corresponds to the attribute value in the target entry.
For example, if the
manager
attribute is used to set the value for a classic CoS, give the
cn
a value of
uid=bparker,ou=people,dc=example,dc=com
. Alternatively, set it to a role,
such as
cn=QA Role,dc=example,dc=com
or a regular attribute value. For example, if the
employeeType
attribute is selected, it can be
full time
or
temporary
.
8. Click the
Add Attribute
button, and add the attributes listed in the CoS. The values used here will
be used throughout the directory in the targeted entries.
9. Set the
cospriority
. There may be more than one CoS that applies to a given attribute in
an entry; the
cospriority
attribute ranks the importance of that particular CoS. The higher
cospriority
will take precedence in a conflict. The highest priority is
0
.
Templates that contain no
cosPriority
attribute are considered the lowest priority. In the case
where two or more templates are considered to supply an attribute value and they have the same
(or no) priority, a value is chosen arbitrarily. The behavior for negative
cosPriority
values is not
defined in Directory Server; do not enter negative values. Also, the
cosPriority
attribute is not
supported by indirect CoS.
10. Hit save.
The CoS will be visible in the left navigation pane once there are entries beneath it. For classic CoS,
there can be multiple entries, according to the different potential values of the attribute specifier.
5.2.2.3. Editing an Existing CoS
To edit the description or attributes generated on the target entry of an existing CoS, do the following:
1. In the Directory Server Console, select the
Directory
tab.
2. Browse the tree in the left navigation pane, and select the parent entry that contains the class of
service.
The CoS appears in the right pane with other entries.
Содержание DIRECTORY SERVER 8.0
Страница 18: ...xviii ...
Страница 29: ...Configuring the Directory Manager 11 6 Enter the new password and confirm it 7 Click Save ...
Страница 30: ...12 ...
Страница 112: ...94 ...
Страница 128: ...110 ...
Страница 190: ...Chapter 6 Managing Access Control 172 4 Click New to open the Access Control Editor ...
Страница 224: ...206 ...
Страница 324: ...306 ...
Страница 334: ...316 ...
Страница 358: ...340 ...
Страница 410: ...392 ...
Страница 420: ...402 ...
Страница 444: ...426 ...
Страница 454: ...436 ...
Страница 464: ...446 ...
Страница 484: ...466 ...
Страница 512: ...494 ...
Страница 522: ...504 ...