John Dalbec wrote: > > Also: is it sufficient to add > > access to * > by dn.exact=<updatedn> write > by * none continue Answer: no, "continue" (continue matching within the current "access" directive) should be "break" (break out of the current "access" directive, continuing with the next). > > at the top of my ACLs? >