ACL Problem

["Florian Preuß" <florian-preuss@gmx.net>]

I have a problem using ACLs. 
My master configuration workd fine. Users only see the users of wop_eg & 
wop. 
# ACLs 
defaultaccess search 
access to dn.children="ou=wop_eg,ou=de,ou=Users,dc=test,dc=net" 
        by users read 
access to dn.children="ou=wop,ou=de,ou=Users,dc=test,dc=net" 
        by users read 
access to dn.children="ou=security,dc=test,dc=net" 
        by * auth 
 
For replication I set up another ldap server using the same directives and 
one additional. And updating doesn't work. If I disable the ACLs on the 
replica, all's fine. I want ldapsearch to give the same results like 
ldapsearch against the master server but it gives me the whole directory. 
 
access to * 
        by dn="uid=replicat,cn=test.net,cn=gssapi,cn=auth" write 
        by * read 
access to dn.children="ou=wop_eg,ou=de,ou=Users,dc=test,dc=net" 
        by users read 
access to dn.children="ou=wop,ou=de,ou=Users,dc=test,dc=net" 
        by users read 
access to dn.children="ou=security,dc=test,dc=net" 
        by * auth 

-- 
Lassen Sie Ihren Gedanken freien Lauf... z.B. per FreeSMS
GMX bietet bis zu 100 FreeSMS/Monat: http://www.gmx.net/de/go/mail