Kyle Tucker wrote: > Bingo. In the admin console, I manually edited the top domain in the > Directory tab using Set Access Permissions and Enable self write for > common attributes, and added shadowLastChange and it updates fine > along with userPassword now. Thanks so much. > > aci: (targetattr = "carLicense ||description ||displayName ||facsimileTelephon > eNumber ||homePhone ||homePostalAddress ||initials ||jpegPhoto ||labeledURL | > |mail ||mobile ||pager ||photo ||postOfficeBox ||postalAddress ||postalCode | > |preferredDeliveryMethod ||preferredLanguage ||registeredAddress ||roomNumber > ||secretary ||seeAlso ||st ||street ||telephoneNumber ||telexNumber ||title > ||userCertificate ||userPassword ||shadowLastChange ||userSMIMECertificate || > x500UniqueIdentifier") (version 3.0;acl "Enable self write for common attribu > tes";allow (write)(userdn = "ldap:///self");) > Good to see you got this working, could I per chance persuade you to write this up for the wiki? :) -- Pete -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3241 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20061106/fd257781/attachment.bin