Re: Troubleshoot ACLs

["Torsten Schlabach (Tascel eG)" <tschlabach@tascel.net>]

On Wed, 15 Sep 2010 14:58:43 +0200, Marcel van Dorp <marcel@van-dorp.nl>
wrote:
> When I log in in PLA, I get the two toplevel DNs:
> cn=config
> dc=example,dc=com
> 
> Which I cannot expand. 

Might you make your life harder than necessary by using PLA?
Could you properly expand dc=example,dc=com when you had the default ACL,
i.e. before you did any changes?

> Hope this clearifies things a bit. Any suggestions?

Take a look at

http://linux.die.net/man/8/slapacl

It may be a bit of a learning curve initially, but this will enable you to
write yourself some scripts which will iterate over a set of entries and
check you permissions. So you can easily make changes and see if they do
what you think you want to do.

Regards,
Torsten

P.S.: Double-check to reply to the list. ;-)