Acl`s..

[Michael Fernández "M." <mfernandez@sernam.cl>]

hi.. i need help with acl´s

 i`ve made some acl´s but they do not work,.

i have the follows bases:


for email accounts dn: ou=accounts, ou=domain.tld, ou=postfix,
o=organization

for alias dn: ou=alias, ou=domain.tld, ou=postfix, o=organization


i have the user: cn=accountadmin, ou=users, o=organization

The thing is that others persons need to access to the ldap server by
phpldapadmin, they need create, modify and erase accounts and alias..

How can i do an ACl that permits to this user erase, modidy and create
accounts and alias but NOT delete de main ou and all the accounts and
alias inside of it? (ou=alias, ou=domain.tld, ou=postfix,
o=organization / u=accounts, ou=domain.tld, ou=postfix, o=organization )


Thanks a lot!!!

Michael.-