Permissions needed for a domain user to view other domain users' token groups

  • Document ID:7005395
  • Creation Date:25-Feb-2010
  • Modified Date:27-Apr-2012
    • Micro Focus Products:
      eDirectory
      Open Enterprise Server

Environment

Novell eDirectory 8.8 for All Platforms
Novell Open Enterprise Server 2 (OES 2) Linux Support Pack 2

Situation

Domain user can't view other domain users' token groups.

Application that use token groups to grant privileges aren't working correctly.

Resolution

Give Public search and read rights to the tokengroup attribute.

In some cases this won't resolve the issue, and Public will need search/compare rights on all
attributes.