Problem with ACI inheritance
807573Sep 27 2005 — edited Oct 3 2005I appear to be having a problem getting password policy entry to inherit an ACI from it�s parent. I�ve setup the following test structure:
ou=outest
|
+--- ou=outest1
|
+--- cn=pwtest (this is a password policy)
If I setup a wide open ACI (allowing all users, all permissions and all attributes) at ou=outest and do an ldapsearch, I can only see ou=outest and ou=outest1. I cannot retrieve any attributes from cn=pwtest, even if I explicitly specify them with ldapsearch.
The strange thing is I�ve successfully done this with another custom password policy and the global password policy in order to allow r/o access to certain attributes and it works fine.
Any ideas?