https://community.hpe.com/t5/operating-system-hp-ux/fedora-ds-acl/m-p/4144399#M738749 I attempted to implement the mentioned condition.What I did is I created two Project – DICE and IM under ou=People.<BR /><BR />As for test, I created two User – Shamim and Shreepath under IM and I created two Users – Sapna and Vinod under DICE<BR /><BR />Now I went to Fedora DS Console and tried setting the below mentioned ACL on DICE project:<BR /><BR /> <BR /><BR />--------------------------------------------------------------------------------------------------------------------------<BR /><BR /> <BR /><BR />(targetattr = "*") (target = "ldap:///ou=DICE,ou=People, dc=im,dc=logica,dc=com") (version 3.0;acl "Restrcited for IM Hosts";deny (all)(userdn = "ldap:///uid=Shreepath,ou=IM,ou=People, dc=im,dc=logica,dc=com" or userdn = "ldap:///uid=shamim,ou=IM,ou=People, dc=im,dc=logica,dc=com") and (ip="10.14.0.*");)<BR /><BR />--------------------------------------------------------------------------------------------------------------------------------<BR /><BR /> <BR /><BR />All I am trying not to let specific host and users of specific projects to access the DICE project.<BR /><BR /> <BR /><BR /> <BR /><BR />Am I right in doing that??<BR /><BR /> Wed, 13 Feb 2008 12:20:16 GMT ramprasad 2008-02-13T12:20:16Z https://community.hpe.com/t5/operating-system-hp-ux/fedora-ds-acl/m-p/4144399#M738749 I attempted to implement the mentioned condition.What I did is I created two Project – DICE and IM under ou=People.<BR /><BR />As for test, I created two User – Shamim and Shreepath under IM and I created two Users – Sapna and Vinod under DICE<BR /><BR />Now I went to Fedora DS Console and tried setting the below mentioned ACL on DICE project:<BR /><BR /> <BR /><BR />--------------------------------------------------------------------------------------------------------------------------<BR /><BR /> <BR /><BR />(targetattr = "*") (target = "ldap:///ou=DICE,ou=People, dc=im,dc=logica,dc=com") (version 3.0;acl "Restrcited for IM Hosts";deny (all)(userdn = "ldap:///uid=Shreepath,ou=IM,ou=People, dc=im,dc=logica,dc=com" or userdn = "ldap:///uid=shamim,ou=IM,ou=People, dc=im,dc=logica,dc=com") and (ip="10.14.0.*");)<BR /><BR />--------------------------------------------------------------------------------------------------------------------------------<BR /><BR /> <BR /><BR />All I am trying not to let specific host and users of specific projects to access the DICE project.<BR /><BR /> <BR /><BR /> <BR /><BR />Am I right in doing that??<BR /><BR /> Wed, 13 Feb 2008 12:20:16 GMT https://community.hpe.com/t5/operating-system-hp-ux/fedora-ds-acl/m-p/4144399#M738749 ramprasad 2008-02-13T12:20:16Z