I have sudo integration with 389 working well with one final issue to resolve before moving it onto our production servers. All users are currently able to see all sudoRole objects with ldapsearch. Is it possible to keep sudo working while disabling search access to sudoRoles? Regards, Darran. -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users