Anne (juniper) Cross wrote: > I have this syntactically correct ACI: > > (targetattr = "*") > (targetfilter="(ou=mailrouting-listserver)") > (version 3.0;acl "Listserver Administrator";allow (all) > (userdn = "ldap:///uid=listserve,ou=resource accounts,ou=people,dc=itasoftware,dc=com");) > > It's set on the ou=mailrouting-listserver,ou=resource accounts,etc,etc branch. > > I can authenticate successfully using the uid=listserve account, but I cannot in fact write or change entries in the ou=mailrouting-listserver branch using the account. > > What have I missed? > Does it work if you remove the (targetfilter="(ou=mailrouting-listserver) clause?