--On Thursday, December 15, 2022 3:02 PM +0100 Stefan Kania <ste...@kania-online.de> wrote:
-------------- dn: cn=config changetype: modify replace: olcAuthzpolicy olcAuthzpolicy: any --------------
Since you only need it to be possible for the lloadd user to assume other identities, I'd use a policy of 'to' instead of 'any'.
--Quanah