The aclsource tells you which node in the tree the ACL was inherited from (for example aclsource=o=Your Company says it came from the root node). I had set up an ACL for my zadcdc which did not include my LDAPUSER.
ibm adcd z os v1 11 13
dn: cn=adcda, o=Your Companychangetype: addobjectclass: topobjectclass: personobjectclass: organizationalPersonobjectclass: ibm-nativeAuthentication sn: adcdagroup: cn=group,o=your Companycn: mqibm-nativeId: adcda
dn: o=Your Companychangetype: modifyreplace: aclEntryaclEntry : access-id:cn=ibmuser, o=Your Company: object:ad:normal:grant:rscw:sensitive:rscw:critical:rscwaclEntry : access-id:cn=adcda, o=Your Company: object:ad:normal:rscw:sensitive:rscw:critical:rscw:restricted:rscw
dn: o=Your Companychangetype: modifyreplace: aclEntryaclEntry : access-id:cn=ibmuser, o=Your Company:object:ad:normal:rscw:sensitive:rscw:critical:rscwaclEntry : access-id:cn=adcda, o=Your Company:object:ad:normal:rscw
2ff7e9595c
Comments