proxy

[Bing D. <Bi...@ci...>]

I apologize if what I said is sort of off topic.  I appreciate it if
somebody can point me to the right direction.

Does anybody have any experience with implementing proxy in LDAP? 
Specifically, here is what I want to accomplish:

Assume there are two entries in the directory server like this:

===================
entry1:

dn: cn=owner1, ou=xxx, dc=xxx, dc=xxx
name: owner1
phonenumber: xxx
proxy: owner2

entry2:

dn: cn=owner2, ou=xxx, dc=xxx, dc=xxx
name: owner2
phonenumber: xxx
===================

As you can see, 'owner1' assigns 'owner2' as his proxy.  So besides DSA
manager, only owner2 is able to modify owner1's entry.

So far I have no idea where to start.  Is this an ACL related issue?  

BTW, we use MessagingDirect's directory server.

Bing





Bing Du <bi...@ta..., 979-845-9577>
Texas A&M University, CIS, Operating Systems, Unix