On Tue, 23 Oct 2018 at 12:32, Michael Ströder <michael(a)stroeder.com> wrote:
You would rather have to grant search access to 'entryDN'.
But sorry, I will not debug your ACLs.
I'm not asking you to debug them.
I was hoping that someone on this list would *know* what access I need
to grant in order for "ou:dn" to work.
Yes, I can run slapd in debug mode but this is a production system so
that means scheduling a maintenance window in several weeks' time. I
was rather hoping to have a solution in place sooner than that thanks
to the kind support of this list but, if I don't have it, I'll figure
it out for myself.