--On Thursday, December 15, 2022 3:02 PM +0100 Stefan Kania stefan@kania-online.de wrote:
dn: cn=config changetype: modify replace: olcAuthzpolicy olcAuthzpolicy: any
Since you only need it to be possible for the lloadd user to assume other identities, I'd use a policy of 'to' instead of 'any'.
--Quanah