Entries that are displayed to root and anonymous users

No entries are displayed to root and anonymous users when logged on to a proxy server instance with the Web Administration Tool. You must change the page control restrictions for such users.

Root and anonymous users are not able to view entries with the Web Administration Tool when logged on to a proxy server, even with the ibm-slapdAllowAnon attribute under the DN entry cn=Connection Management, cn=Front End, cn=Configuration set to true. The reason is because the Web Administration Tool uses page control to browse through entries. If paging is enabled only for administrators by setting the ibm-slapdPagedResAllowNonAdmin attribute to false under the DN entry cn=ProxyDB, cn=Proxy Backends, cn=IBM Directory, cn=Schemas, cn=Configuration, then non-administrators are not allowed to browse through entries with the Web Administration Tool. This restriction is also applicable in the case of RDBM servers.

For the root and anonymous users to view the entries with the Web Administration Tool, the following must be considered:
  • Set the ibm-slapdAllowAnon attribute under the DN entry cn=Connection Management, cn=Front End, cn=Configuration to true.
  • Set the ibm-slapdPagedResAllowNonAdmin attribute under the DN entry cn=ProxyDB, cn=Proxy Backends, cn=IBM Directory, cn=Schemas, cn=Configuration to true.
After you set the attributes, restart the directory server instance.
Note: The root user is an anonymous user in the case of proxy server for DIT-related operations.