18.7. Displaying ACIs

This section describes how to display ACIs.

18.7.1. Displaying ACIs Using the Command Line

Use the ldapsearch utility to display ACI using the command line. For example, to display the ACIs set on dc=example,dc=com and sub-entries: 
# ldapsearch -D "cn=Directory Manager" -W -p 389 -h server.example.com -x \
     -b "dc=example,dc=com" -s sub '(aci=*)' aci

18.7.2. Displaying ACIs Using the Console

To display ACIs using the Console:
  1. Open the Directory Server Console.
  2. On the Directory tab, right-click the entry, and select Set Access Permissions
  3. Optionally, select Show Inherited ACIs to additionally display entries on higher levels of the directory.