to attrs=userPassword,shadowLastChange by dn="cn=idm,ou=Administrators,dc=repltest,dc=evolveum,dc=com" write by dn="cn=admin,dc=repltest,dc=evolveum,dc=com" write by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth write by dn="cn=replication manager,ou=Administrators,dc=repltest,dc=evolveum,dc=com" read by anonymous auth by self write by * none
to dn.base="" by * read
to dn.subtree="ou=people,dc=repltest,dc=evolveum,dc=com" by dn="cn=idm,ou=Administrators,dc=repltest,dc=evolveum,dc=com" write by dn="cn=admin,dc=repltest,dc=evolveum,dc=com" write by dn="cn=replication manager,ou=Administrators,dc=repltest,dc=evolveum,dc=com" read
to dn.subtree="ou=groups,dc=repltest,dc=evolveum,dc=com" by dn="cn=idm,ou=Administrators,dc=repltest,dc=evolveum,dc=com" write by dn="cn=admin,dc=repltest,dc=evolveum,dc=com" write by dn="cn=replication manager,ou=Administrators,dc=repltest,dc=evolveum,dc=com" read
to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth write by dn="cn=admin,dc=repltest,dc=evolveum,dc=com" write by dn="cn=idm,ou=Administrators,dc=repltest,dc=evolveum,dc=com" read by dn="cn=replication manager,ou=Administrators,dc=repltest,dc=evolveum,dc=com" read by self read by * none
