Hi Michael,

2015-08-25 10:11 GMT+02:00 Michael Ströder <michael@stroeder.com>:

You should use a decent LDAP client which does not send controls which
circumvent slapd's internal checks.

You are right Michael, but having a UI is really comfortable. Which other client(s) would you suggest (with UI) ?

| And you should not give normal users 'manage' right.

OK, then I'll test with a user which has only write access.