fedora DS ACL

[ramprasad]

I attempted to implement the mentioned condition.What I did is I created two Project – DICE and IM under ou=People.

As for test, I created two User – Shamim and Shreepath under IM and I created two Users – Sapna and Vinod under DICE

Now I went to Fedora DS Console and tried setting the below mentioned ACL on DICE project:



--------------------------------------------------------------------------------------------------------------------------



(targetattr = "*") (target = "ldap:///ou=DICE,ou=People, dc=im,dc=logica,dc=com") (version 3.0;acl "Restrcited for IM Hosts";deny (all)(userdn = "ldap:///uid=Shreepath,ou=IM,ou=People, dc=im,dc=logica,dc=com" or userdn = "ldap:///uid=shamim,ou=IM,ou=People, dc=im,dc=logica,dc=com") and (ip="10.14.0.*");)

--------------------------------------------------------------------------------------------------------------------------------



All I am trying not to let specific host and users of specific projects to access the DICE project.





Am I right in doing that??