Hi Team,

We have implemented 389-ds in Ubuntu 12.04 LTS. Everything is working fine.we have created ou called "groups " such as ou=groups,dc=xxx,dc=com. same 389-ds (1.2.1-0ubuntu2)implemented in the  Ubuntu linux 10.04 LTS and  we can see the "aci" attributes in the groups OU. Same aci is not available in the "1.2.10.4-0ubuntu3.1".

For example, if i connected my older ldap server through phpldapadmin and select any group from "ou=groups,dc=xxx,dc=com" ,  i can see the below fields from aci attribute,

(targetattr="*") (target="ldap:///cn=*,ou=services,ou=groups,dc=xxx,dc=com") (version 3.0;acl "<group name>"; allow (write)(userdn="ldap:///uid=<user name>,ou=people,dc=xxx,dc=com");)
(targetattr="*") (target="ldap:///cn=*,ou=services,ou=groups,dc=xxx,dc=com") (version 3.0;acl "<group name>"; allow (write)(userdn="ldap:///uid=<user name>,ou=people,dc=xxx,dc=com");)
(targetattr="*") (target="ldap:///cn=*,ou=services,ou=groups,dc=xxx,dc=com") (version 3.0;acl "<group name>"; allow (write)(userdn="ldap:///uid=<user name>,ou=people,dc=xxx,dc=com");)

For getting the same details, if i connect to my new LDAP server through phpldapadmin, "aci" attribute itself not displayed.

Is it the attribute is related to samba ? Refered some of the blogs through net, if i search through ldapsearch,

ldapsearch -x -h localhost -p <port no>  -s base -b "cn=schema" "objectclass=*" | grep -i samba -> output is displayed in the old server with some values.same command if i apply in new server, no output.

My question may be silly,pls don't mistake.what could be the reason ?

Regards,
Varad