I am trying to grant a specific group the ability to edit one attribute. I have the following ACI in place with no success:

 

(targetattr ="description")(version 3.0;acl "evolvadmins description modify";allow(all) (groupdn = "ldap:///cn=evolvadmins,ou=Groups,dc=evolv,dc=com");)

 

Any ideas what I need to do? Any good guides to troubleshooting and writing ACIs?

 

Josh

 

--

Joshua Ellsworth

Senior Systems Administrator, Primatics Financial

Phone: 571.765.7528

jellsworth@primaticsfinancial.com