Results 1 to 5 of 5

Thread: LDAP custom attribute permission issue.

  1. #1
    Join Date
    Mar 2011
    Posts
    131
    Rep Power
    4

    Question LDAP custom attribute permission issue.

    Hello Guys,

    I've edited /opt/zimbra/data/ldap/config/cn=config/cn=schema/cn={3}zimbra.ldif file and added some custom attribute in account object. I've wrote an admin extension which adds a new tab in account edit page contains the new attributes.

    All the operation works fine like add,edit and delete account. The values of the new attributes gets updated and works like a charm.

    Now, I created a new domain admin user and added a grant -set.account.zimbraIsDelegatedAdminAccount to deny.

    I've logged in with domain admin user and when I edit any user. I can edit other attributes of account but not my custom attributes.

    Can anybody tell me what is wrong with it? And what if I want to make my custom attributes editable and works like normal attributes even if the set.account.zimbraIsDelegatedAdminAccount is deny.

    Thank You!

    --stalker.

  2. #2
    Join Date
    Oct 2009
    Location
    Tokyo
    Posts
    113
    Rep Power
    6

    Default

    I am not quite sure why&how you did add a grant -set.account.zimbraIsDelegatedAdminAccount to deny.
    (Are you trying this on ZCS7,right?)

    But for making your custom attributes editable for a domain admin,
    how about allowing set.account.<your custom attribute> to the domain admin account?

  3. #3
    Join Date
    Mar 2011
    Posts
    131
    Rep Power
    4

    Default

    Quote Originally Posted by yutaka View Post
    I am not quite sure why&how you did add a grant -set.account.zimbraIsDelegatedAdminAccount to deny.
    (Are you trying this on ZCS7,right?)

    But for making your custom attributes editable for a domain admin,
    how about allowing set.account.<your custom attribute> to the domain admin account?
    Yup, that exactly what we tried but we had problem that when we try to add our custom attribute, zimbra was giving error that "No such attribute in account". Then we found that we forgot to set a flag which allow domain admin to edit those attributes. So, we changed /opt/zimbra/conf/attrs/zimbra-attrs.xml file and everything worked.

  4. #4
    Join Date
    Oct 2009
    Location
    Tokyo
    Posts
    113
    Rep Power
    6

    Default

    So does that mean that your problem has already been solved, right?

    Do you still have any issues?

  5. #5
    Join Date
    Mar 2011
    Posts
    131
    Rep Power
    4

    Default

    Quote Originally Posted by yutaka View Post
    So does that mean that your problem has already been solved, right?

    Do you still have any issues?
    Yes, the issue has been resolved.

Similar Threads

  1. Add Custom Attribute in LDAP
    By stalker in forum Developers
    Replies: 2
    Last Post: 06-22-2011, 02:15 AM
  2. LDAP Cannot bind on migration to new server
    By neekster in forum Migration
    Replies: 23
    Last Post: 03-09-2009, 03:08 AM
  3. [SOLVED] Can't receive messages from Gmail
    By agfeller in forum Administrators
    Replies: 4
    Last Post: 02-04-2008, 11:16 AM
  4. Backup issues
    By telescop in forum Administrators
    Replies: 3
    Last Post: 03-01-2007, 06:09 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •