On 04. juni 2015 09:10, Stefan Bauer wrote:
why is cn=Manager,dc=example,dc=com not able to access cn=config with the second ACL? According to manpage the asterisk means any so also cn=config.
An operation only checks the ACLs on the database(s) which contains the relevant entry (or entries for Search), plus the frontend ACLs if no other ACLs apply. -- Hallvard
