Yes, that was it. Problem solved. The targetattr string had a parameter in it which, when removed, gave me a valid syntax. The parameter was nsNumDepts. We have not used this parameter, and I do not know why it was there. Maybe it was a carryover from an old default from years ago.
Thanks to everyone for your help.
--Brian
On Wed, 7 Dec 2011, Brian High wrote:
I think I found something...
I was looking at:
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Managing_Access_Control-Access_Control_Usage_Examples.html
And went to check on the ACI permissions for my main search base. I see an
"All Users" entry under Users and the correct three boxes are checked on the
rights tab. But when clicking on the "Targets" tab, I get a popup error
message saying "The targetattr list contains unknown attributes or
unsupported syntax." Then when I click OK and try to scroll the list, the
console crashes.
I see some Bugzilla entries related to ACI lists, such as this one:
https://bugzilla.redhat.com/show_bug.cgi?id=733103
So, I will look those over and see if I might find one that matches my
situation.
--Brian
On Wed, 7 Dec 2011, Brian High wrote:
Jeremy,
Thanks for the suggestion.
I have found that setting this to "off" or "on" (and restarting
dirsrv) makes no difference.
Any other ideas?
--Brian
On Thu, 8 Dec 2011, Jeremy A. Mates wrote:
El día 7 de diciembre de 2011 22:35, Brian High <high@xxxxxx> escribió:
Hi 389-users,
Perhaps you can help solve a mystery for me.
nsslapd-allow-unauthenticated-binds: on perhaps?
Jeremy
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
Brian High
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
