On Wed, 15 Sep 2010 14:58:43 +0200, Marcel van Dorp marcel@van-dorp.nl wrote:
When I log in in PLA, I get the two toplevel DNs: cn=config dc=example,dc=com
Which I cannot expand.
Might you make your life harder than necessary by using PLA? Could you properly expand dc=example,dc=com when you had the default ACL, i.e. before you did any changes?
Hope this clearifies things a bit. Any suggestions?
Take a look at
http://linux.die.net/man/8/slapacl
It may be a bit of a learning curve initially, but this will enable you to write yourself some scripts which will iterate over a set of entries and check you permissions. So you can easily make changes and see if they do what you think you want to do.
Regards, Torsten
P.S.: Double-check to reply to the list. ;-)