Hello,<div><br></div><div>Just looking for a sanity check. Here is what I have now:</div><div><br></div><div>







<p class="p1">olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn=&quot;cn=admin,dc=example,dc=com&quot; write by * none</p>
<p class="p1">olcAccess: {1}to dn.base=&quot;&quot; by * read</p>
<p class="p1">olcAccess: {2}to * by self write by dn=&quot;cn=admin,dc=example,dc=com&quot; write by * read</p><p class="p1"><br></p>
<p class="p2">Here is what I think I want:</p>
<p class="p2">olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn=&quot;cn=admin,dc=example,dc=com&quot; write by * none</p>
<p class="p2">olcAccess: {1}to attrs=shadowLastChange by * read</p>
<p class="p1">olcAccess: {2}to dn.base=&quot;&quot; by * read</p>
<p class="p1">olcAccess: {3}to * by self write by dn=&quot;cn=admin,dc=example,dc=com&quot; write by * read</p>
<p class="p2"><br></p>
<p class="p2">Here is the file I think I should use to accomplish this:</p>
<p class="p3">changetype: modify</p>
<p class="p3">delete: olcAccess</p>
<p class="p3">olcAccess: {1}</p>
<p class="p3">-</p>
<p class="p3">add: olcAccess</p>
<p class="p1"><span class="s1">olcAccess: {1}to </span>attrs=shadowLastChange by * read</p>
<p class="p3">-</p>
<p class="p3">delete: olcAccess</p>
<p class="p3">olcAccess: {2}</p>
<p class="p3">-</p>
<p class="p3">add: olcAccess</p>
<p class="p1">olcAccess: {2}to dn.base=&quot;&quot; by * read</p>
<p class="p1">-</p>
<p class="p1">add: olcAccess</p>
<p class="p1">olcAccess: {3}to * by self write by dn=&quot;cn=admin,dc=example,dc=com&quot; write by * read</p><p class="p1"><br></p><p class="p1">And, of course, before I do this I will shutdown ldap, slapcat a backup, and restart. Does this look right?</p>
<p class="p1">thanks,</p><p class="p1">maria</p></div>