Dear Andreas,

 

Could you tell me about policy? I created 2 xml file with policy: my and
group. 

 

 

MY:

 

<Policies> 

<Policy name="POLMNA" referralPolicy="false" active="true"> 

   <Rule name="RULE_MNA"> 

      <ServiceName name="iPlanetAMWebAgentService" /> 

      <ResourceName name="http://195.178.207.160/opentox/MakeMNA"/> 

      <AttributeValuePair> 

         <Attribute name="GET" /> 

         <Value>allow</Value> 

      </AttributeValuePair>

      <AttributeValuePair> 

         <Attribute name="POST" /> 

         <Value>allow</Value> 

      </AttributeValuePair>

   </Rule> 

   <Subjects name="MNA_GROUP" description="">

        <Subject name="explorermf" type="LDAPUsers" includeType="inclusive">

            <AttributeValuePair>

                <Attribute name="Values"/>

                <Value>uid=explorermf,ou=people,dc=opentox,dc=org</Value>

            </AttributeValuePair>

        </Subject>

   </Subjects>

</Policy> 

</Policies>

 

GROUP:

 

<!DOCTYPE Policies PUBLIC "-//Sun Java System Access Manager7.1 2006Q3 

  Admin CLI DTD//EN" "jar://com/sun/identity/policy/policyAdmin.dtd"> 

 

<Policies> 

<Policy name="POLMNA1" referralPolicy="false" active="true"> 

   <Rule name="RULE_MNA1"> 

      <ServiceName name="iPlanetAMWebAgentService" /> 

      <ResourceName name="http://195.178.207.160/opentox/MakeMNA"/> 

      <AttributeValuePair> 

         <Attribute name="GET" /> 

         <Value>allow</Value> 

      </AttributeValuePair>

      <AttributeValuePair> 

         <Attribute name="POST" /> 

         <Value>allow</Value> 

      </AttributeValuePair>

   </Rule> 

   <Subjects name="MNA_GROUP" description="">

        <Subject name="MNA_id" type="LDAPGroups" includeType="inclusive">

            <AttributeValuePair>

                <Attribute name="Values"/>

                <Value>cn=all,ou=people,dc=opentox,dc=org</Value>

            </AttributeValuePair>

        </Subject>

   </Subjects>

</Policy> 

</Policies>

 

Policies work fine. But the question is that have I to use in
<Value>cn=all,ou=people,dc=opentox,dc=org</Value> for all users? But now I
am logining alone. In
http://www.opentox.org/data/documents/development/opentoxreports/opentoxrepo
rtd33/ I see:

 

Groups always use: cn=<gid>, ou=groups, dc=opentox, dc=org. 

 

What does it mean - cn=<gid>? What does parameter I have to use instead of
<gid> to apply all users login? I pasted "all", but It is wrong.

 

Best regards

 

Dmitry S. Druzhilovsky

 

 <http://www.ibmc.msk.ru/en/departments/30> Laboratory of Structure-Function
Based Drug Design

119121, Russia, Moscow, Pogodinskaya street, 10 
Phone: +7 499 255-30-29
Fax: +7 499 245-08-57