dn: olcDatabase={1}mdb,cn=config changetype: modify replace: olcAccess olcAccess: {0}to attrs=userPassword by self write by dn="cn=admin,dc=example,dc=org" write by anonymous auth by * none olcAccess: {1}to attrs=shadowLastChange by self write by dn="cn=admin,dc=example,dc=org" write by * read olcAccess: {2}to * by dn="cn=admin,dc=example,dc=org" write by * read