Debian style cn=config

Hi,

while looking what debian generates in their cn=config for Debian Jessie I found following acl on the frontend database:

dn: olcDatabase={-1}frontend,cn=config objectClass: olcDatabaseConfig objectClass: olcFrontendConfig olcDatabase: {-1}frontend olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage by * break olcAccess: {1}to dn.exact="" by * read olcAccess: {2}to dn.base="cn=Subschema" by * read olcSizeLimit: 500

I somehow fail to grasp the relevance of granting manage access to the frontend database.

Is it just me or is this is acl just mindless pasting.

Apart from that debian jessie is now on openldap 2.4.40 thoug still built agains gnutls.

Greetings Christian