Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 461 / 532

Appendix B, ACL File Syntax 461
ACL File Syntax
The Default ACL File
After installing the server, the server uses the default settings in the file
server_root/httpacl/generated.https-serverid.acl
. There is
also a file called
genwork.https-serverid.acl
that is a working copy the
server uses until you save and apply your changes when working with the user
interface. When editing the ACL file, you might want to work in the
genwork
file and then use the Enterprise Server to save and apply the changes.
The following text is from the default file:
# File automatically written
#
# You may edit this file by hand
#
version 3.0;
acl "agents";
authenticate (user,group) {
prompt = "Enterprise Server";
};
deny (all)
user = "anyone"
allow absolute (all)
user = "all";
acl "default";
allow (read,execute,list,info)
user = "anyone";
allow (write,delete)
user = "all";
The default ACL file is referenced in
magnus.conf
as follows:
ACLFile absolutepath/generated.https-serverid.acl
You can reference multiple ACL files in magnus.conf and then use their ACLs
for resources in
obj.conf
. However, the server uses only the first ACL file
with the web publisher and when evaluating access control for objects that
don’t have specific ACLs listed in
obj.conf
. If you’re using the Enterprise
Server windows to do some access control, the first ACL file in magnus.conf
should point to the file
generated.https-serverid.acl
. See the section
“Referencing ACL Files in obj.conf” on page 462 for more information.