To Create the Required ACIs

1. As the proxy manager, add a global ACI that allows anonymous access to the join data view.

   % ldapmodify -p 1389 -D "cn=proxy manager" -w password dn: cn=myjoin1,cn=virtual access controls changetype: add objectclass: acisource dpsaci: (targetattr="*") (target = "ldap:///o=join") \ (version 3.0; acl "anonymous_access"; allow(all) userdn="ldap:///anyone";) cn: myjoin1

2. Create a connection handler to handle connections to the o=join domain.

   % dpconf create-connection-handler myjoin1-handler

3. Enable the connection handler and configure it to handle all binds from users under o=join.

   % dpconf set-connection-handler-prop myjoin1-handler is-enabled:true \ bind-dn-filters:"uid=.*,ou=people,o=join"

4. Configure the connection handler to use the pool of ACIs added previously.

   % dpconf set-connection-handler-prop myjoin1-handler aci-source:myjoin1