on the other hand it is necessary to specify “exact” for ACL: ex: access to * by dn.exact="cn=toto" write
Well, let's read the manual:
The <dnstyle> is also optional; however, it is recommended to specify both the dn= and the <dnstyle> to avoid ambigui- ties.