Drivers & Rights
For historical reasons, I need to exclude a specific eDirectory OU from a JDBC driver's scope when it performs a "find matching object" search. I need the driver to search two other OUs that are both int he same organization, however. The driver currently performs a subtree search from the top Organization.
I had assumed that I could create a user object with rights to only the specific OUs I want the driver to search, set the driver to be security equal to that object, and exclude the OU I do not want to search that way, but it doesn't seem to work. When I check "effective rights" the driver object shows as having nothing but Browse Entry rights to the OU in question. Even drilling all the way down to a specific attribute on a specific user object, iManager shows the driver as having no effective rights at all, but it is still able to read the attribute value and attempt a match.
|