|OpenLDAP Faq-O-Matic : OpenLDAP Software FAQ : Configuration : SLAPD Configuration : Access Control : Access control customization : DynACL: pluggable access control configuration : ACI|
The OpenLDAP ACI mechanism is experimental, it is not provided for general use. Those who choose to toy with it are advised that the syntax and semantics of the mechanism may change in the future.
The OpenLDAP ACIs used to be built-in into slapd. As of OpenLDAP 2.3, they have been moved under the dynacl framework in a manner that is transparent to the user. Sooner or later, they will be totally factored out of slapd and moved into a run-time loadable module, although fully preserving the original functionality.
|[New Answer in "ACI"]|