useAuthzIdForAuditAttrs

record proxied authorization information

Description

Specifies whether Directory Server records the authentication ID, such as the bind DN, of the proxy acting on behalf of the user, or the authorization ID of the user for whom the proxy is requesting the operation.

When useAuthzIdForAuditAttrs is set to on, Directory Server records the authorization ID in the creatorsName or modifiersName during a write operation on an entry. By default Directory Server records the authentication ID.

Entry DN: cn=config
Valid range: on | off
Default value: off
Syntax: DirectoryString
Example: useAuthzIdForAuditAttrs: on

Attributes

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWdsee7
Stability Level	Obsolete: Scheduled for removal after this release