Hi Quanah,
Let me explain in detail.
Now I can search the entire OU and contextCSN as below . I am searching with bind dn.
++
olcAccess: {1}to dn.subtree="dc=ldapprod,dc=com" by dn="cn=a
dmin,dc=ldapprod,dc=com" write by dn="uid=authuser,
dc=ldapprod,dc=com" write by dn="uid=repluser,
dc=ldapprod,dc=com" read by dn="uid=replmonitor,
dc=ldapprod,dc=com" read by * none
++
ldapsearch -x -H ldaps://IP address -D "uid=replmonitor,dc=ldapprod,dc=com" -W -b "dc=ldapprod,dc=com" contextCSN
+++++
#
ldapprod.comdn: dc=ldapprod,dc=com
contextCSN: 20200212065804.242207Z#000000#000#000000
contextCSN: 20200213163933.076777Z#000000#001#000000
# admin,
ldapprod.comdn: cn=admin,dc=ldapprod,dc=com
# group,
ldapprod.comdn: ou=group,dc=ldapprod,dc=com
# people,
ldapprod.comdn: ou=people,dc=ldapprod,dc=com
# replmonitor,
ldapprod.comdn: uid=replmonitor,dc=ldapprod,dc=com
+++++
Now replmonitor, got full access like admin where it can do all operation like cn=admin user. Now I want to restrict the user replmonitor only it can search and query contextcsn attr not any other dn.
How can i achieve this?.
Kindly guide me.