This content has been marked as final. Show 3 replies
If you can paste in your ACIs, maybe we can see where the problem is.
I came here this morning to close the thread as I realized that the ACIs were missing from the suffix. Can't figure how / why it's missing from dsconf import.
So, ACIs being missing, looks like the DS is usable (readable) only by the directory manager.
An easy thing to fix !
One reason might be because aci is an operational attribute. If you obtained your import LDIF using an ldapsearch you might have missed operational attributes and ldapSubEntries. One reason this is risky is because of "hidden" attributes and entries that can be missing from your extract.