groups in access directive

[Joeri van Ruth <Joeri.van.Ruth@dds-projects.nl>]

Hello,

According to the OpenLDAP 2.0 administrators guide, the <who>
clause of an access directive looks like this:

<who> ::= [* | anonymous | users | self |
        dn[.<subject style>]=<regex>]
        [dnattr=<attrname> ]
        [group[/<objectclass>[/<attrname>][.<basic style>]]=<regex> ]
        [peername[.<basic style>]=<regex>]
        [sockname[.<basic style>]=<regex>]
        [domain[.<basic style>]=<regex>]
        [sockurl[.<basic style>]=<regex>]
        [set=<setspec>]
        [aci=<attrname>]

Unfortunately, it does not explain the use of the GROUP and
ACI options.

Does anybody here know how they work?

Joeri