If I have this acl:
to 
dn="sendmailMTAKey=t...@bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc=
aaaaa,dc=local"
 by ssf=64 
dn.exact="uid=acctest,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=loc
al" read
 
I can access with this ldap search:
ldapsearch  -LLL -W -s sub -b 
"sendmailMTAKey=t...@bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaa
aa,dc=local" -D 
"uid=acctest,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=local" -H 
ldaps://ldap.local sendmailMTAKey

If I change the acl to 
to 
dn="sendmailMTAKey=t...@bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc=
aaaaa,dc=local" attrs="sendmailMTAKey"
 by ssf=64 
dn.exact="uid=acctest,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=loc
al" read

The ldapsearch is not returning any object. How to resolve this?

Reply via email to