The second directive is that ACLs seems to ignore this dynamic group: # admins access to dn.subtree="dc=msr-inria,dc=inria,dc=fr" by group="cn=admins,ou=groups,dc=msr-inria,dc=inria,dc=fr" write by * break
Try
access to dn.subtree="dc=msr-inria,dc=inria,dc=fr"
by group/groupOfURLs/memberURL="cn=admins,ou=groups,dc=msr-inria,dc=inria,dc=fr" write
by * break
(please excuse any unintended line wrapping).
Indeed, many thanks. -- Guillaume Rousse Moyens Informatiques - INRIA Futurs Tel: 01 69 35 69 62