Write access to chained suffix?

Hi,
I created a chained suffix in my Sun DS 5.2P6. From my DS I can browse the tree on the remote server (again a Sun DS 5.2) where I granted "(all,proxy)" to proxy user.
But when I try to write (MOD) an entry on the chained tree, I see "RESULT err=50". Insufficient access.
I can make write operations only accessing directly to the server which really contains the tree.
What is the configuration to grant write access for MOD,ADD in a chained tree?
Thank you very much
Best Regards
Marco

Uhm,
I make tests with Directory Manager, but it really seems that if I write from another user with write access I can modify the chained tree!
So, it seems that only Directory Manager can't modify entries on chained tree. And ACI is sufficient whit proxy permission.
So... all working for my purpose.
Regards
Marco

Similar Messages

DS 6.3.1 and chained suffix

Problem description:
Trying to search content of chained suffix and requesting 'dn' only, results in no entries in response. Changing search request to return attributes 'dn' and 'uid', for example, returns data as expected.
Details about configuration:
internal.ds.server - Directory Server 6.3.1 on Solaris 10 x86
extternal.ds.server - Directory Server 6.3.1 on Solaris 10 x86
Chained suffix o=external was created from ldif on internal.ds.server. Access to o=external on external.ds.server uses identity of dedicated user with proxy right granted.
Local ACI checking is set on internal.ds.server. This configuration was set to make possible use Access Manager in internal environment to authenticate against users in both, internal and external environments.
User used for search is uid=siebelviewer,ou=people,dc=ds,dc=server and has full set of rights (allows (all) in ACI ) on dc=ds,dc=server data tree on internal.ds.server.
Debugging results (till now):
When local ACI check is set, processing of search request is recorded in log file of both LDAP servers. On external.ds.server is recorded number of returned entries (>0). On internal.ds.server 0 returned entries is recorded.
Turning on debugging ACI processing and reporting into error log on internal.ds.server shows failed attempt to access due to insufficient access right:
# ldapsearch -h internal.ds.server -p 389 -D "uid=siebelviewer,ou=people,dc=ds,dc=server" -b "o=external,dc=ds,dc=server" uid=*sadm* dn
# less errors
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Operation extension 16e4a38 deallocated
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Operation extension 16e4a38 allocated
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - acl_init_userGroup: found in cache for dn:uid=siebelviewer,ou=people,dc=ds,dc=server
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:o=external,dc=ds,dc=server: container:-1
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:dc=ds,dc=server: container:2
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:dc=server: container:-1
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:: container:0
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index: 0 2
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index: 1 0
*[03/Aug/2011:17:01:38 +0200] - DEBUG - conn=-1 op=-1 msgId=-1 - acl: access to entry not allowed*
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Copying the Context CURR ENTRY context cache
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Copying the Context (from ACLPB to ACLCB)If another attrinute (uid) is expected in result, it works:
# ldapsearch -h internal.dc=ds,dc=server -p 389 -D "uid=siebelviewer,ou=people,dc=ds,dc=server" -b "o=external,dc=ds,dc=server" uid=*sadm* dn uid
Enter bind password:
version: 1
dn: uid=SADMIN,ou=People,o=external,dc=ds,dc=server
uid: SADMIN
# less errors
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Operation extension 16e4a38 deallocated
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Operation extension 16e4a38 allocated
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - acl_init_userGroup: found in cache for dn:uid=siebelviewer,ou=people,dc=ds,dc=server
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:o=external,dc=ds,dc=server: container:-1
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:dc=ds,dc=server: container:2
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:dc=server: container:-1
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:: container:0
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index: 0 2
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index: 1 0
*[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - ####################ACCESS_ALLOWED START #######*
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for update:uid=sadmin,ou=people,o=external,dc=ds,dc=server: container:-1
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for update:ou=people,o=external,dc=ds,dc=server: container:-1
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index AFTER PREPARE: 0 2
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index AFTER PREPARE: 1 0
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - ************ RESOURCE INFO STARTS *********
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Client DN: uid=siebelviewer,ou=people,dc=ds,dc=server
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - resource type:256(read target_DN )
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Slapi_Entry DN: uid=sadmin,ou=people,o=external,dc=ds,dc=server
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - ATTR: uid
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - rights:read
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - ************ RESOURCE INFO ENDS *********Removing local ACI checking (nschecklocalaci: off) on internal.ds.server makes possible to search with request to return only 'dn' attribute. But local ACI checking is solution for another issue. :-(
Note: This is not about discussion "why chained suffix and not directory proxy server?"
Note2: The fact about obsoleted chained suffix in DS 6.3.1 is known as well, but ...

Hello,
Yes I've very close relationship with Directory;-)
Regarding the justification, your full entire use case seems complex, so getting back to basis might help. The examples you posted show the issue: A search with attribute list {dn,uid} returns both attributes. In the same context, a search with {dn} only does not return anything. This behaviour is incorrect from a LDAP point of view.
Hope this helps
-Sylvain

Write Access to a file in Tomcat server via J2me Midlet

How to make write access to a file using midlet and HTTP connection?
I have text file in the Tomcat server and I am able to read it with HTTP connection using emulator, but don't have idea how to make write access to the file. I'd like to write some text to the file.

Thanks, but could you be more accurate. What methods should I use in the servlet and what methods in the midlet?
Some links which concern this subject, would be nice too. I have tried with google, no success.

Write access to a directory for ASP 2.0 application stops working on Windows 2012 Standard Cloud Server

Just moved our ASP 2.0 based web application to a Windows 2012 Standard Cloud Server. A directory is used for temporary copying of files for the application. The Read Write access is properly given and everything works but then stops working
in about 2.5 hours. The settings are still there, to make things work again typically I add "Everyone" to the security list and apply and then 3 hours later I remove "Everyone" and this refreshes the security setting and things work
againg for a couple of hours. Last Cloud server was 2008 R2 and we had no issues. Recently moved to this new cloud server. Code has been functioning fine for years and can not migrate it to newer ASP since will have to make quite a few code
changes. Obviously a bug which needs to be addressed. Again the security settings do not disappear but are no longer handled properly every 3 hours or so.

Hi,
Is there any other files have the same issue? Please create a test folder and give the same permissions with the directory for ASP 2.0 application to see if the issue still exists.
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How do I resolve this error message? The iPhoto library is on a locked volume. Reopen iPhoto when you have read/write access, or reopen iPhoto with the Option key held down to choose another library.

How do I resolve this error message? The iPhoto library is on a locked volume. Reopen iPhoto when you have read/write access, or reopen iPhoto with the Option key held down to choose another library.

Hi j,
I don't know if this will work, but I'd try logging in to an admin account, going to your main library (not user library), opening it, opening Application Support, selecting iPhoto, hold down the command key and press i, click on the lock in the lower left, entering the password and making sure you have Read & Write privileges for System and Admin.

I just got a new mac and use my external hard drive to save all my images to but whenever I go to save my photo to my hard drive it says I do not have write access....Whats wrong how do i fix this or do i need a new hard drive??

I just got a new mac and use my external hard drive to save all my images to but whenever I go to save my photo to my hard drive it says I do not have write access....Whats wrong how do i fix this or do i need a new hard drive??@

This is a Mac question not a Photoshop question, and I am a Windows users, but I can Google and this might be what you need to do:
http://www.makeuseof.com/answers/change-read-permision-external-hard-drive-mac/

How do I allow users to create folders in a shared folder where we all then have read/write access to those new folders?

I have three users who need to access a particular folder on one of our other Macs. The folder resides on the desktop of that particular Mac and it is set as "shared" with all of our accounts set to access the folder. When a user creates a new subfolder in that shared folder, the permissions are instantly set to allow the creator read/write access but the other users are only allowed read-only access. Is there a way to set the permissions so that any new folder created in that shared folder automatically gives read/write access to all accounts who are authorized access to that shared folder?

You should be able to take the permissions you have set and "apply to enclosed items." I am trying to attach a picture of what this looks like so my apologies if it does not work.
Highlight your folder you want and go to File>Get Info or command+I and at the bottom where it has Sharing and Permissions, click the lock button to authenticate. Click the gear and click "apply to enclosed items". See if that works.

Why do I get an error message 'write access not granted' when I try to copy paste jpegs from my folder on desktop to an external hard drive/(Transcend)pendrive

This is a new problem. I transferred some images from my Nikon camera via image capture but converted my raw files to jpegs in the Nikon View nx 2 software and saved them in a new folder on my desktop. I use a 2010 MBP that has OS10.9.5 fully updated. When i tried copying and pasting the jpegs to an external pen drive I got an error message saying the jpg (the number) could not be saved as write access is not granted. I thought the pen drive may be full. So I attached an external hard drive. got the same message. I then opened the same jpeg in photoshop cc and tried saving it as png on the hard drive, got the same message. Was unable to handover the photographs to my client. Was hugely embarrassed. Pl let me know if there is a way out of this and if its a Mac OSX issue? Thanks.

right click on the jpeg (the other mouse button then you use to click with) or on trackpad, hold down control and click, in the menu that pops up, click on "get info" next, if the box labeled "locked" is checked, uncheck it. Down at the bottom, there should be a box with your user name, "staff" and "everyone". to the right of this are options to change these you may need to click the small padlock icon and enter in your password. then change all of the permissions to read and write.

Disable write access to external drives via USB & FW400/800

We have a Mac Pro on our AD network. We want to disable users from having write access to external HDD through USB or FireWire so that they cannot possibly copy data to a attached USB/firewire drives.
Is this possible?

Smith Micro has a product called Internet CleanUp that has the feature your looking for.
http://my.smithmicro.com/mac/cleanup/index.html

NFS write access without local user

Hi,
I try to get write access to NFS from one to another linux system without local user account and group.
System 1. /etc/exports -->set nfs share /backup
Folder /backup all files owned by oracle:oinstall
oracle(104):oinstall(106) 664
System 2. user: root(1):root(1)
#>mount -t nfs .....
All files are owned by userid 104 and groupid 106
I can get write access If I change userid and group id on system 2 to 104/106 but I think that could be smart way.
Does anyone know the right was to get write access without have a same local user(id) and group(id)
Thanks
*T

You can try the following in your /etc/exports file:
/backup *(rw,insecure,all_squash,anonuid=104,anongid=106)
Then reload the exports file using the command "service nfs reload"The above will allow rw access to the /backup directory and map all requests to the nobody account and remap the nobody account uid and guid to 104 and 106 of the nfs server system. The insecure option is required by some PCNFS clients. For more detailed information please check the exports man page.

Hello. I am running the newest version of itunes on my PC. everytime I try to copy a cd to itunes it gives me an error message that says I do not have write access for my itunes media folder or a folder within it. I cannot get this resolved.

Hello. I am running the newest version of itunes on my PC. everytime I try to copy a cd to itunes it gives me an error message that says I do not have write access for my itunes media folder or a folder within it. I cannot get this resolved using the solution given on the error message. I have been using itunes for 4 years and have never encountered this problem until yesterday. Help would be greatly appreciated.

Quit iTunes.
Go to My Music folder.
Select the iTunes folder, right click > Properties.
Click the Security tab and make sure you have full Read/Write privileges.

In I tunes I cant down load a CD. I get the message "The file couldn't be convereted. You don't have write access for you ITunes media folder or a folder with in it. To change permissions, ... When I do this it still dosen't work

In I tunes I can't down load a CD. I get the message "The file couldn't be convereted. You don't have write access for you ITunes media folder or a folder with in it. To change permissions, ... When I do this it still dosen't work.

Thanks C F McBlob but I recursively changed the permissions of my Music directory meaning every file and directory beneath it, as well as the directory itself, had the write permissions added.
I used "chmod -R u+w ./Music" and chmod -R g+w ./Music" to do it.
Alas, no cigar. :-(

I am working with Adobe 'Classroom in a book' and it's asking me for 'write access' when saving.

I am working with Adobe 'Classroom in a book' and it's asking me for 'write access' when saving.
How do I do that.
I tried going to file >get info and it would not allow me to unlock.
How do I do that?

It sounds like the folder you are saving to does not have the proper permission for you to write to it. What OS are you using?

Having trouble with error message in itunes every since I had a new hard drive installed. Write access are not enough or permissions aren't allowed. I have changed all of these in the corresponding folders, restarted and nothing works. I need help bad??

Got a new hard drive installed and since then, I cannot get purchased song into my itunes. It is telling me that my write access or permission are wrong. I have changed all and nothing works. HELP!!!!!!

Use the trackpad to scroll, thats what it was designed for. The scroll bars automatically disappear when not being used and will appear if you scroll up or down using the trackpad.
This is a user-to-user forum and most people will post on here if they have problems. You very rarely get people posting to say there update went smooth. The fact is the vast majority of Mountain Lion users will not be experiencing any major problems with the OS, or maybe with apps which are not compatible, but thats hardly Apple's fault if developers don't update their apps.

Could not save because write access was not granted+lightroom 4.2

Hi
I use Mac osx Lion and LR 4.2 & PS CS6 and a network atorage when open a file whit LR in PS after edit file don't save or save as whit orginal name in network storage and show "Could not save “...........” because write access was not granted" and I have to close LR save file in PS to network storage and reopen LR.
But when I send a file in LR whit Open finder to PS ans save to network storage evreything work ok but I have to do Sync again lightroom.
I think somethink don't work correct in LR .
Do evreybody have this problem?

Hi
when I send a file in LR 4.2 whit show in finder to PS CS6 everything is ok .

Write access to chained suffix?

Similar Messages

Maybe you are looking for