UCS 2.4 - Univention

4 Univention Directory Manager
from a superordinate policy. In subordinate policies, new values can be assigned to the attributes in
question.
Attention:
If one of the entry fields of a subordinate policy remains empty, this means that the value of the superordi-
nate policy is adopted unchanged. To make sure that the value of the superordinate policy is not valid in
subordinate objects, the appropriate entry field is to be declared in Empty attributes in the Object tab.
4.5.11.2 Applying policies
Policies can be linked to container objects via the Policies tab. With other objects, the appropriate policy
types are available on the individual tabs, where an existing policy can be selected or a new policy created
for the object.
If an object is linked to a policy, or inherits policy settings which cannot be applied to the object, the settings
remain without effect for the object. This makes it possible, for example, to link a policy to the root of the
LDAP directory, which is then valid for all the objects of the domain which can apply this policy. Objects
which cannot apply this policy are not affected.
Attention:
To every object which is linked to a policy, the current settings of this policy always apply. Thus, when
editing a policy, the settings for all the objects linked to this policy are changed! The values from the
changed policy apply to objects already registered in the system and linked to the policy, in the same way
as to objects added in the future.
The Referencing objects tab of the policies objects shows a list of all objects linked to the policy.
4.5.11.3 Linking policies to containers
110
’Policies’ tab
This tab is available for containers, organisational units and domains. It shows the policies currently
linked to the object (see Illustration 4.11). The tab offers the possibility to edit the settings of a policy,
and to link the changed settings to the objects as a new policy. Furthermore, linked policies can be
unlinked from the object.
In the first column, all the available policy types are listed. The second column states which concrete
policy of the relevant type is valid for the present object. In this context, inherited means if any
policies are set for superordinate objects, the present object will inherit these policies.
Inheritance works over a random number of levels. The superordinate object can therefore have in-
herited the policy from the next higher object. Inherited is the standard setting. Inherited is displayed
even if none of the superordinate objects has a policy assigned. This circumstance is illustrated in