lastmod on
# owner writeable
-access to attrs=userPassword,sshrsaauthkey
+access to attrs=userPassword,sudoPassword
by group="cn=LDAP Administrator,ou=users,@@DN@@" write
by dn="uid=sshdist,ou=users,@@DN@@" write
by self write
by * compare
+access to attrs=sshrsaauthkey
+ by group="cn=LDAP Administrator,ou=users,@@DN@@" write
+ by dn="uid=sshdist,ou=users,@@DN@@" write
+ by self read
+ by * compare
+
# debian readable
access to attrs=activity-pgp,activity-from,dnsZoneEntry
by group="cn=LDAP Administrator,ou=users,@@DN@@" write