Re: Still Group access problems...

[Eric Bréhier - SCI <eric.brehier@unilim.fr>]

Hello,

Your lonely ACL :
>access to dn=".*,o=elex,c=be"
>        by group="cn=administrators,o=elex,c=be"                write
>        by *                                                    none

Your log 
>=> access_allowed: entry (o=elex,c=BE) attr (children)
>
>=> acl_get: entry (o=elex,c=BE) attr (children)
><= acl_get: no match
>
>=> acl_access_allowed: write access to entry "o=elex,c=BE"

Everything is above : (o=elex,c=BE)  must have an ACL on it unless you
can't add neither delete "children"
For add/delete you need access on father not for other operations.

Eric
(---------------------------------------------------------------------)
( Eric Brehier - Service Commun Informatique     )
( Universite de Limoges - France                       )
( e-mail : eric.brehier@unilim.fr                         )
(---------------------------------------------------------------------)