Andrew Cobaugh writes:
I have tried something like this: access to dn.base="cn=psu.facstaff,dc=psu,dc=edu" by * none This actually ended up preventing other dn's from showing up.
Prevented others from showing up in what kind of searches? It also prevents you from using that DN as the base DN of a search. See OPERATION REQUIREMENTS in man slapd.access. If that's not intended, try 'by * =scxd' instead. See THE <ACCESS> FIELD in the manpage. Or omit the 'd' with older OpenLDAP versions.