lastmod on
# owner writeable
-access to attrs=userPassword,sshrsaauthkey
+access to attrs=userPassword,sudoPassword
+ by group="cn=LDAP Administrator,ou=users,@@DN@@" write
+ by dn="uid=sshdist,ou=users,@@DN@@" write
+ by self write
+ by * compare
+
+access to attrs=sshrsaauthkey
by group="cn=LDAP Administrator,ou=users,@@DN@@" write
by dn="uid=sshdist,ou=users,@@DN@@" write
by self read