--On Wednesday, January 04, 2017 2:44 PM +0100 Alberto Aldrigo alberto.aldrigo@h-farm.com wrote:

So an ACL could be:

to dn.subtree="o=company1,dc=domain,dc=com" by group="c cn=admins_company1,o=company1,dc=domain,dc=com" write

I have 25 of these groups, so I need 25 ACLs like the one above: having one per line can lead to a performance issue?

Generally it should be fine, as it's not a particularly complex ACL.

--Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com