NDSSchema.exe grants excess rights

  • 7005959
  • 13-May-2010
  • 26-Apr-2012

Environment

NSL7
NSL7sp1
eDirectory

Situation

Excess rights to eDirectory are granted by the schema extension tool that ships with NSL7 and NSL7sp1.

In iManager or SLManager unauthorized users can View/Delete/Create/ Edit NSL applications and preferences for other users.

Resolution

Fixed with NSL7.0.1 HotFix1

Run the ndsschema.exe included HotFix1 for NSL7SP1.  This will remove the excess rights and re-assign rights as they should be.