SOLVED: ACL's for ACI use

[Turbo Fredriksson <turbo@bayour.com>]

[for the mailinglist archives]

Quoting Turbo Fredriksson <turbo@bayour.com>:

> ----- s n i p -----
> [tuzjfi.tty2]$ ldapmodify -h localhost -f /tmp/agby.ldif
> SASL/GSSAPI authentication started
> SASL username: turbo@BAYOUR.COM
> SASL SSF: 56
> SASL installing layers
> modifying entry "o=Agby,c=SE"
> ldapmodify: update failed: o=Agby,c=SE
> ldap_modify: Insufficient access (50)
> ----- s n i p -----
> 
> Could someone please enlighten me on why I get 'Insufficient access'?

Hm! It seems like I need 'auth' access to krb5PrincipalName
as well.