

access to dn=".*,{ esmith::util::ldapBase ($DomainName); }"
  attr=userpassword
  by dn="uid=root,{ esmith::util::ldapBase ($DomainName); }" write
  by * auth

access to dn=".*,{ esmith::util::ldapBase ($DomainName); }"
  by dn="uid=root,{ esmith::util::ldapBase ($DomainName); }" write
  by * read

access to dn=".*,{ esmith::util::ldapBase ($DomainName); }"
  by * read

defaultaccess read

