CA Directory - Unable to view full tree

Products

• CA Directory

Issue/Introduction

After enabling Access Controls on CA Directory, when connecting to the DSA via Apache LDAP Browser (Not limited to) we are not able to see the directory tree that our user is configured for.

Softerra LDAP Browser and JXplorer don't exhibit this problem. They show the authorized OU and list only the authorized attributes we specified in the access rule.

Environment

Component : CA Directory

Resolution

When connecting to any directory tree after Access Controls are enabled, it is best practice to connect to your directory tree with a Base DN configured. LDAP browsers such as Apache LDAP Browser or similar applications are not intelligent enough to automatically build the Base DN properly and require the end user to provide the correct location.