> No, I believe that openLDAP looks at the ACLS and finds the first one that > matches, and then stops. Therefore, if I put that rule before the other one, True by default, eg control="stop" implicitly. But you could modify that rule: by * none continue to (basically) tell the ACL parser that there's more to come. See slapd.access(5).