On Wed, 15 Sep 2010 14:58:43 +0200, Marcel van Dorp marcel@van-dorp.nl wrote:

When I log in in PLA, I get the two toplevel DNs: cn=config dc=example,dc=com

Which I cannot expand.

Might you make your life harder than necessary by using PLA? Could you properly expand dc=example,dc=com when you had the default ACL, i.e. before you did any changes?

Hope this clearifies things a bit. Any suggestions?

Take a look at

http://linux.die.net/man/8/slapacl

It may be a bit of a learning curve initially, but this will enable you to write yourself some scripts which will iterate over a set of entries and check you permissions. So you can easily make changes and see if they do what you think you want to do.

Regards, Torsten

P.S.: Double-check to reply to the list. ;-)