Permissions for Skulking a Directory
To skulk a directory, you must have the following permissions:
· Administer, write, insert, or delete permission to the directory.
· The server principal for the server system where you enter the directory synchronize command needs read, write, and administer permissions to the directory that you intend to skulk.
If the server is included in the server authorization group subsys/dce/cds-servers, these permissions should already be in place. If in doubt, use the acl show command to verify that the server principal has the appropriate permissions. (See the acl(8dce) reference page for complete information on the acl show command arguments.)