version: 1

# entry-id: 1
dn: dc=example,dc=com
objectClass: top
objectClass: domain
dc: example
description: dc=example,dc=com
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015542Z
modifyTimestamp: 20200325015542Z
nsUniqueId: a2b33229-6e3b11ea-8de0c78c-83e27eda
aci: (targetattr="dc || description || objectClass")(targetfilter="(objectClas
 s=domain)")(version 3.0; acl "Enable anyone domain read"; allow (read, search
 , compare)(userdn="ldap:///anyone");)
aci: (targetattr="ou || objectClass")(targetfilter="(objectClass=organizationa
 lUnit)")(version 3.0; acl "Enable anyone ou read"; allow (read, search, compa
 re)(userdn="ldap:///anyone");)

# entry-id: 2
dn: cn=389_ds_system,dc=example,dc=com
objectClass: top
objectClass: nscontainer
objectClass: ldapsubentry
cn: 389_ds_system
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015542Z
modifyTimestamp: 20200325015542Z
nsUniqueId: a2b3322a-6e3b11ea-8de0c78c-83e27eda

# entry-id: 3
dn: ou=groups,dc=example,dc=com
objectClass: top
objectClass: organizationalunit
ou: groups
aci: (targetattr="cn || member || gidNumber || nsUniqueId || description || ob
 jectClass")(targetfilter="(objectClass=groupOfNames)")(version 3.0; acl "Enab
 le anyone group read"; allow (read, search, compare)(userdn="ldap:///anyone")
 ;)
aci: (targetattr="member")(targetfilter="(objectClass=groupOfNames)")(version 
 3.0; acl "Enable group_modify to alter members"; allow (write)(groupdn="ldap:
 ///cn=group_modify,ou=permissions,dc=example,dc=com");)
aci: (targetattr="cn || member || gidNumber || description || objectClass")(ta
 rgetfilter="(objectClass=groupOfNames)")(version 3.0; acl "Enable group_admin
  to manage groups"; allow (write, add, delete)(groupdn="ldap:///cn=group_admi
 n,ou=permissions,dc=example,dc=com");)
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015543Z
modifyTimestamp: 20200325015543Z
nsUniqueId: a2b3322b-6e3b11ea-8de0c78c-83e27eda

# entry-id: 4
dn: ou=people,dc=example,dc=com
objectClass: top
objectClass: organizationalunit
ou: people
aci: (targetattr="objectClass || description || nsUniqueId || uid || displayNa
 me || loginShell || uidNumber || gidNumber || gecos || homeDirectory || cn ||
  memberOf || mail || nsSshPublicKey || nsAccountLock || userCertificate")(tar
 getfilter="(objectClass=posixaccount)")(version 3.0; acl "Enable anyone user 
 read"; allow (read, search, compare)(userdn="ldap:///anyone");)
aci: (targetattr="displayName || legalName || userPassword || nsSshPublicKey")
 (version 3.0; acl "Enable self partial modify"; allow (write)(userdn="ldap://
 /self");)
aci: (targetattr="legalName || telephoneNumber || mobile || sn")(targetfilter=
 "(|(objectClass=nsPerson)(objectClass=inetOrgPerson))")(version 3.0; acl "Ena
 ble self legalname read"; allow (read, search, compare)(userdn="ldap:///self"
 );)
aci: (targetattr="legalName || telephoneNumber")(targetfilter="(objectClass=ns
 Person)")(version 3.0; acl "Enable user legalname read"; allow (read, search,
  compare)(groupdn="ldap:///cn=user_private_read,ou=permissions,dc=example,dc=
 com");)
aci: (targetattr="uid || description || displayName || loginShell || uidNumber
  || gidNumber || gecos || homeDirectory || cn || memberOf || mail || legalNam
 e || telephoneNumber || mobile")(targetfilter="(&(objectClass=nsPerson)(objec
 tClass=nsAccount))")(version 3.0; acl "Enable user admin create"; allow (writ
 e, add, delete, read)(groupdn="ldap:///cn=user_admin,ou=permissions,dc=exampl
 e,dc=com");)
aci: (targetattr="uid || description || displayName || loginShell || uidNumber
  || gidNumber || gecos || homeDirectory || cn || memberOf || mail || legalNam
 e || telephoneNumber || mobile")(targetfilter="(&(objectClass=nsPerson)(objec
 tClass=nsAccount))")(version 3.0; acl "Enable user modify to change users"; a
 llow (write, read)(groupdn="ldap:///cn=user_modify,ou=permissions,dc=example,
 dc=com");)
aci: (targetattr="userPassword || nsAccountLock || userCertificate || nsSshPub
 licKey")(targetfilter="(objectClass=nsAccount)")(version 3.0; acl "Enable use
 r password reset"; allow (write, read)(groupdn="ldap:///cn=user_passwd_reset,
 ou=permissions,dc=example,dc=com");)
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015543Z
modifyTimestamp: 20200325015543Z
nsUniqueId: a2b3322c-6e3b11ea-8de0c78c-83e27eda

# entry-id: 5
dn: ou=permissions,dc=example,dc=com
objectClass: top
objectClass: organizationalunit
ou: permissions
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015543Z
modifyTimestamp: 20200325015543Z
nsUniqueId: a2b3322d-6e3b11ea-8de0c78c-83e27eda

# entry-id: 6
dn: ou=services,dc=example,dc=com
objectClass: top
objectClass: organizationalunit
ou: services
aci: (targetattr="objectClass || description || nsUniqueId || cn || memberOf |
 | nsAccountLock ")(targetfilter="(objectClass=netscapeServer)")(version 3.0; 
 acl "Enable anyone service account read"; allow (read, search, compare)(userd
 n="ldap:///anyone");)
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015544Z
modifyTimestamp: 20200325015544Z
nsUniqueId: a2b3322e-6e3b11ea-8de0c78c-83e27eda

# entry-id: 7
dn: uid=demo_user,ou=people,dc=example,dc=com
objectClass: top
objectClass: nsPerson
objectClass: nsAccount
objectClass: nsOrgPerson
objectClass: posixAccount
uid: demo_user
cn: Demo User
displayName: Demo User
legalName: Demo User Name
uidNumber: 99998
gidNumber: 99998
homeDirectory: /var/empty
loginShell: /bin/false
nsAccountLock: true
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015544Z
modifyTimestamp: 20200325061615Z
nsUniqueId: a2b3322f-6e3b11ea-8de0c78c-83e27eda
entryUUID: 973e1bbf-ba9c-45d4-b01b-ff7371fd9008

# entry-id: 8
dn: cn=demo_group,ou=groups,dc=example,dc=com
objectClass: top
objectClass: groupOfNames
objectClass: posixGroup
objectClass: nsMemberOf
cn: demo_group
gidNumber: 99999
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015544Z
modifyTimestamp: 20200325015544Z
nsUniqueId: a2b33230-6e3b11ea-8de0c78c-83e27eda
entryUUID: f6df8fe9-6b30-46aa-aa13-f0bf755371e8

# entry-id: 9
dn: cn=group_admin,ou=permissions,dc=example,dc=com
objectClass: top
objectClass: groupOfNames
objectClass: nsMemberOf
cn: group_admin
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015545Z
modifyTimestamp: 20200325015545Z
nsUniqueId: a2b33231-6e3b11ea-8de0c78c-83e27eda

# entry-id: 10
dn: cn=group_modify,ou=permissions,dc=example,dc=com
objectClass: top
objectClass: groupOfNames
objectClass: nsMemberOf
cn: group_modify
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015545Z
modifyTimestamp: 20200325015545Z
nsUniqueId: a2b33232-6e3b11ea-8de0c78c-83e27eda

# entry-id: 11
dn: cn=user_admin,ou=permissions,dc=example,dc=com
objectClass: top
objectClass: groupOfNames
objectClass: nsMemberOf
cn: user_admin
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015545Z
modifyTimestamp: 20200325015545Z
nsUniqueId: a2b33233-6e3b11ea-8de0c78c-83e27eda

# entry-id: 12
dn: cn=user_modify,ou=permissions,dc=example,dc=com
objectClass: top
objectClass: groupOfNames
objectClass: nsMemberOf
cn: user_modify
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015546Z
modifyTimestamp: 20200325015546Z
nsUniqueId: a2b33234-6e3b11ea-8de0c78c-83e27eda

# entry-id: 13
dn: cn=user_passwd_reset,ou=permissions,dc=example,dc=com
objectClass: top
objectClass: groupOfNames
objectClass: nsMemberOf
cn: user_passwd_reset
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015546Z
modifyTimestamp: 20200325015546Z
nsUniqueId: a2b33235-6e3b11ea-8de0c78c-83e27eda

# entry-id: 14
dn: cn=user_private_read,ou=permissions,dc=example,dc=com
objectClass: top
objectClass: groupOfNames
objectClass: nsMemberOf
cn: user_private_read
creatorsName: cn=Directory Manager
modifiersName: cn=Directory Manager
createTimestamp: 20200325015547Z
modifyTimestamp: 20200325015547Z
nsUniqueId: a2b33236-6e3b11ea-8de0c78c-83e27eda

