Overview

Edit online

Access Control Lists (ACLs) provide a means to protect information stored in an LDAP directory.

The Administrators use ACLs to restrict access to different portions of the directory, or specific directory entries. LDAP directory entries are related to each other by a hierarchical tree structure. Each directory entry (or object) contains the distinguished name of the object as well as a set of attributes and their corresponding values.

The access control model defines the following two sets of attributes:
  • The entryOwner information
  • The Access Control Information (ACI)
In conformance with the LDAP model, the ACI information and the entryOwner information is represented as attribute-value pairs. The LDIF syntax can be used to administer these values.