I am not getting this page. Maybe there should be an example or so. I can use user anywhere in the acls and it will expand to the dn of the binddn of the ldapsearch request?

user | this : resolves to the set { "cn=User,cn=adfasdfa,cn=asdfadfa,ou=asdfasdfas,ou=adsasdfasdf", "cn=Resource" }

How can I get only 'User' and not the whole dn also not 'cn=User'?

[1] https://www.openldap.org/faq/data/cache/1133.html