From ClueWiki

This is a list of LDAP attributes that Cluenet uses.

Contents 1 uid 2 uidnumber 3 gidnumber 4 gecos 5 loginShell 6 homeDirectory 7 userPassword 8 cn 9 gn 10 sn 11 c 12 mail 13 st 14 l 15 telephoneNumber 16 postalAddress 17 clueSignupInfo 18 clueIrcNick 19 clueVoipURI 20 clueGender 21 clueBirthYear 22 clueSshPrivKey 23 clueSshPubKey 24 clueGeneralContact 25 krb5PrincipalName 26 suspendedPassword 27 New Information

uid

This is the username of the account. It is set at account creation time and cannot be changed. Distinguished names are based off the uid attribute. This attribute is publicly viewable.

uidnumber

This is the numeric UID of the account. It is set at account creation time and cannot be changed. This attribute is publicly viewable.

gidnumber

This is the numeric GID of the account. It is set at account creation time and cannot be changed. This attribute is publicly viewable.

gecos

This corresponds to the gecos (or "real name") field in /etc/passwd. It is publicly viewable. It can be changed by the user.

loginShell

This is the shell that the user is logged in with. It defaults to /bin/bash. It is publicly viewable. It can be changed by the user.

homeDirectory

This is the home directory for the account. It is set at account creation time and cannot be changed. This attribute is publicly viewable.

userPassword

This is the hashed password for the user. It is not publicly viewable. The hash is as generated by "slappasswd". Do not change this manually, use the "passwd" command.

cn

This is the user's "Common Name". It should be set to the user's real full name, if the user wants to make this public available. It is publicly viewable.

gn

This is the user's "Given Name". It should be set to the user's real first name. It is only viewable by admins.

sn

This is the user's "SurName". It should be set to the user's real last name. It is only viewable by admins.

c

This is a two letter code representing the user's country of origin. The two letter codes are defined by ISO 3166. It is publicly viewable.

mail

This is the user's primary email address. It is only viewable by admins.

st

This is the user's state or province of residence. The full name should be used. It is only viewable by admins.

l

This is the user's "Locality" or city of residence. The full name should be used. It is only viewable by admins.

telephoneNumber

This is the user's telephone number. It is only viewable by admins.

postalAddress

This is the user's street address. It is only viewable by admins.

clueSignupInfo

This is the information that the user provided at signup time. It cannot be changed by the user. It is only viewable by admins.

clueIrcNick

This is the nickname that the user uses on the ClueIRC network. It is publicly viewable.

clueVoipURI

If the user has a VOIP URI, this should be the full URI, including the "sip:" (or other) prefix. It is publicly viewable.

clueGender

This should be the user's gender, either "male" or "female". It is not publicly viewable.

clueBirthYear

This should be the user's year of birth. It is not publicly viewable.

clueSshPrivKey

If the user wants to automatically distribute a SSH private key to all the servers, this should be set to that key. It is not publicly viewable.

clueSshPubKey

If the user wants to automatically distribute a SSH public key to the authorized_keys file on all the servers, this should be set to that key. Multiple clueSshPubKey entries can be specified. The "ssh-dss" or "ssh-rsa" prefix and any comments at the end that the user wants should be included. It is publicly viewable.

clueGeneralContact

If the user wants to specify any more contact information, they can do so here. Multiple entries can be provided. It is not publicly viewable.

krb5PrincipalName

This is the name of the user's Kerberos principal. In all cases, it will be USERNAME@CLUENET.ORG. It is only used to get some other services using both LDAP and Kerberos to work.

suspendedPassword

This is a custom Cluenet attribute, and is used to store the password of a suspended account. The userPassword attribute is removed for a suspended account to prevent the user from logging in.

New Information

I am building the table at the moment, and have put it on a temp page. -davenull 06:07, 6 March 2009 (UTC)

https://ssl.cluenet.org/wiki/index.php/Cluenet_LDAP_Attributes_New

The above information is outdated. Someone with time please do the following:

Need a table like this:

Attribute    Self-Readable    Self-Writable    Access-Controllable    Default-Access    Description
clueSshPrivKey    Yes        Yes        No            none        User's SSH Private Key
clueSignupInfo    Yes        No        Yes            none        Information from the signup system
url        Yes        Yes        Yes            read        The user's web site or other personal URL

Include all custom attributes (listed in the schema below) and any standard attributes that are listed in the access list below it.  The schema includes attribute descriptions of custom attributes.  Most other standard attributes are listed at https://ssl.cluenet.org/wiki/index.php/Cluenet_LDAP_Attributes.

The access list has several different kinds of attributes.  Any attributes that are included in a phrase that looks like the below are access-controllable:
olcAccess: {73}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstelepho
 neNumber=anon) attrs=telephoneNumber  by self write  by * read
olcAccess: {74}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstelepho
 neNumber=user) attrs=telephoneNumber  by self write  by users read  by * none
olcAccess: {75}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstelepho
 neNumber=none) attrs=telephoneNumber  by self write  by * none
olcAccess: {76}to dn.children="ou=people,dc=cluenet,dc=org" attrs=telephoneNum
 ber  by self write  by * none
Of this series of access directives, the only one that you need to pay attention to is the last one, as it specifies the default access (in this case, none).


dn: cn={5}cluenet,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: {5}cluenet

From here down, these are the actual attributes.


olcAttributeTypes: {0}( 1.3.6.1.4.1.28906.2.2.1 NAME 'clueSshPrivKey' DESC 'A 
 DSA SSH Private Key' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {1}( 1.3.6.1.4.1.28906.2.2.2 NAME 'clueSshPubKey' DESC 'A D
 SA SSH Public Key' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 15 )
olcAttributeTypes: {2}( 1.3.6.1.4.1.28906.2.2.3 NAME 'clueSignupInfo' DESC 'Te
 xtual signup information' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {3}( 1.3.6.1.4.1.28906.2.2.4 NAME 'clueIrcNick' DESC 'An IR
 C nickname' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SIN
 GLE-VALUE )
olcAttributeTypes: {4}( 1.3.6.1.4.1.28906.2.2.5 NAME 'clueVoipUri' DESC 'A URI
  indicating a user voip contact information' EQUALITY caseIgnoreMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {5}( 1.3.6.1.4.1.28906.2.2.6 NAME 'clueGeneralContact' DESC
  'General contact information not specified by other types' EQUALITY caseIgno
 reMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {6}( 1.3.6.1.4.1.28906.2.2.7 NAME 'clueGender' DESC 'Gender
  of the user, either male or female' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {7}( 1.3.6.1.4.1.28906.2.2.8 NAME 'clueBirthYear' DESC 'Bir
 th year of the user' EQUALITY integerMatch ORDERING integerOrderingMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {8}( 1.3.6.1.4.1.28906.2.2.9 NAME 'suspendedPassword' DESC 
 'RFC2256/2307: password of suspended user' EQUALITY octetStringMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.40{128} SINGLE-VALUE )
olcAttributeTypes: {9}( 1.3.6.1.4.1.28906.2.2.10 NAME 'clueAuthorizedAbility' 
 DESC 'A URI indicating an authorized ability of a user' EQUALITY caseIgnoreMa
 tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {10}( 1.3.6.1.4.1.28906.2.2.11 NAME 'url' DESC 'User websit
 e URL or other contact URL' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstri
 ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {11}( 1.3.6.1.4.1.28906.2.2.12 NAME 'altEmail' DESC 'Altern
 ate user email, other than the mail attribute' EQUALITY caseIgnoreMatch SUBST
 R caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {12}( 1.3.6.1.4.1.28906.2.2.13 NAME 'pgpKeyId' DESC 'User P
 GP Key ID' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {13}( 1.3.6.1.4.1.28906.2.2.14 NAME 'aimSn' DESC 'AIM Scree
 n Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {14}( 1.3.6.1.4.1.28906.2.2.15 NAME 'xmppUri' DESC 'XMPP or
  Jabber Contact URI' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {15}( 1.3.6.1.4.1.28906.2.2.16 NAME 'msnSn' DESC 'MSN Messe
 nger Screen Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {16}( 1.3.6.1.4.1.28906.2.2.17 NAME 'scheduleInfo' DESC 'In
 formation or Link to User Schedule or Availability Information' EQUALITY case
 IgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.15 SINGLE-VALUE )
olcAttributeTypes: {17}( 1.3.6.1.4.1.28906.2.2.18 NAME 'twitterUser' DESC 'Twi
 tter Username' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {18}( 1.3.6.1.4.1.28906.2.2.19 NAME 'diggUser' DESC 'Digg U
 sername' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {19}( 1.3.6.1.4.1.28906.2.2.20 NAME 'slashdotUser' DESC 'Sl
 ashdot Username' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {20}( 1.3.6.1.4.1.28906.2.2.21 NAME 'googlecodeUser' DESC '
 Google Code Username' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {21}( 1.3.6.1.4.1.28906.2.2.22 NAME 'githubUser' DESC 'GitH
 ub Username' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {22}( 1.3.6.1.4.1.28906.2.2.23 NAME 'freshmeatUser' DESC 'F
 reshmeat Username' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {23}( 1.3.6.1.4.1.28906.2.2.24 NAME 'occupation' DESC 'Job 
 and Position' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {24}( 1.3.6.1.4.1.28906.2.2.25 NAME 'timezone' DESC 'User L
 ocal Timezone' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {25}( 1.3.6.1.4.1.28906.2.2.26 NAME 'school' DESC 'School A
 ttended' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {26}( 1.3.6.1.4.1.28906.2.2.27 NAME 'skill' DESC 'A skill o
 r piece of knowledge that the user has' EQUALITY caseIgnoreMatch SUBSTR caseI
 gnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {27}( 1.3.6.1.4.1.28906.2.2.28 NAME 'wikipediaUser' DESC 'W
 ikipedia Username' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {28}( 1.3.6.1.4.1.28906.2.2.29 NAME 'clueNotes' DESC 'Rando
 m assorted notes' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {29}( 1.3.6.1.4.1.28906.2.2.30 NAME 'openID' DESC 'OpenID I
 D' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {30}( 1.3.6.1.4.1.28906.2.2.31 NAME 'spokenLanguage' DESC '
 A language that the user speaks fluently' EQUALITY caseIgnoreMatch SUBSTR cas
 eIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {31}( 1.3.6.1.4.1.28906.2.4.2 NAME 'acsgivenName' DESC 'Acc
 ess to givenName Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.15 SINGLE-VALUE )
olcObjectClasses: {0}( 1.3.6.1.4.1.28906.2.3.1 NAME 'clueSshUser' DESC 'A SSH 
 key user' AUXILIARY MAY ( clueSshPrivKey $ clueSshPubKey ) )
olcObjectClasses: {1}( 1.3.6.1.4.1.28906.2.3.2 NAME 'clueCountry' DESC 'Countr
 y of a user.' AUXILIARY MAY countryName )
olcObjectClasses: {2}( 1.3.6.1.4.1.28906.2.3.3 NAME 'clueSignup' DESC 'Signup 
 information for a user.' AUXILIARY MAY ( clueSignupInfo $ clueGender $ clueBi
 rthYear ) )
olcObjectClasses: {3}( 1.3.6.1.4.1.28906.2.3.4 NAME 'clueContact' DESC 'Extra 
 contact information for a user' AUXILIARY MAY ( clueIrcNick $ clueVoipUri $ c
 lueGeneralContact ) )
olcObjectClasses: {4}( 1.3.6.1.4.1.28906.2.3.5 NAME 'suspendedUser' DESC 'Info
 rmation pertaining to account suspension' AUXILIARY MAY suspendedPassword )
olcObjectClasses: {5}( 1.3.6.1.4.1.28906.2.3.6 NAME 'deletedUser' DESC 'Inform
 ation pertaining to account deletion' AUXILIARY MAY ( uid $ uidNumber ) )
olcObjectClasses: {6}( 1.3.6.1.4.1.28906.2.3.7 NAME 'authorizedAbilityObject' 
 DESC 'Allows clueAuthorizedAbility attribute' AUXILIARY MAY clueAuthorizedAbi
 lity )
olcObjectClasses: {7}( 1.3.6.1.4.1.28906.2.3.8 NAME 'extraInfo' DESC 'Extra in
 formation about a user' AUXILIARY MAY ( url $ altEmail $ pgpKeyId $ aimSn $ x
 mppUri $ msnSn $ scheduleInfo $ twitterUser $ diggUser $ slashdotUser $ googl
 ecodeUser $ githubUser $ freshmeatUser $ occupation $ timezone $ school $ ski
 ll $ wikipediaUser $ clueNotes $ openID $ spokenLanguage ) )
olcObjectClasses: {8}( 1.3.6.1.4.1.28906.2.3.9 NAME 'accessControl' DESC 'Acce
 ss control attributes' AUXILIARY MAY ( acsgivenName $ acsc $ acsst $ acsl $ a
 csclueGender $ acsclueBirthYear $ acsmail $ acssn $ acstelephoneNumber $ acsc
 lueSignupInfo $ acsclueVoipURI $ acsclueSshPubKey $ acsclueGeneralContact $ a
 csjpegPhoto $ acsurl $ acsaltEmail $ acspgpKeyId $ acsaimSn $ acsxmppUri $ ac
 smsnSn $ acsscheduleInfo $ acstwitterUser $ acsdiggUser $ acsslashdotUser $ a
 csgooglecodeUser $ acsgithubUser $ acsfreshmeatUser $ acsoccupation $ acstime
 zone $ acsschool $ acsskill $ acswikipediaUser $ acsclueNotes $ acsopenID $ a
 csspokenLanguage ) )

From here down are the ACL attributes.


olcAttributeTypes: {32}( 1.3.6.1.4.1.28906.2.4.3 NAME 'acsc' DESC 'Access to c
  Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SIN
 GLE-VALUE )
olcAttributeTypes: {33}( 1.3.6.1.4.1.28906.2.4.4 NAME 'acsst' DESC 'Access to 
 st Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 S
 INGLE-VALUE )
olcAttributeTypes: {34}( 1.3.6.1.4.1.28906.2.4.5 NAME 'acsl' DESC 'Access to l
  Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SIN
 GLE-VALUE )
olcAttributeTypes: {35}( 1.3.6.1.4.1.28906.2.4.6 NAME 'acsclueGender' DESC 'Ac
 cess to clueGender Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {36}( 1.3.6.1.4.1.28906.2.4.7 NAME 'acsclueBirthYear' DESC 
 'Access to clueBirthYear Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {37}( 1.3.6.1.4.1.28906.2.4.8 NAME 'acsmail' DESC 'Access t
 o mail Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 15 SINGLE-VALUE )
olcAttributeTypes: {38}( 1.3.6.1.4.1.28906.2.4.9 NAME 'acssn' DESC 'Access to 
 sn Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 S
 INGLE-VALUE )
olcAttributeTypes: {39}( 1.3.6.1.4.1.28906.2.4.10 NAME 'acstelephoneNumber' DE
 SC 'Access to telephoneNumber Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {40}( 1.3.6.1.4.1.28906.2.4.11 NAME 'acsclueSignupInfo' DES
 C 'Access to clueSignupInfo Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {41}( 1.3.6.1.4.1.28906.2.4.12 NAME 'acsclueVoipURI' DESC '
 Access to clueVoipURI Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {42}( 1.3.6.1.4.1.28906.2.4.13 NAME 'acsclueSshPubKey' DESC
  'Access to clueSshPubKey Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {43}( 1.3.6.1.4.1.28906.2.4.14 NAME 'acsclueGeneralContact'
  DESC 'Access to clueGeneralContact Attribute' EQUALITY caseIgnoreMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {44}( 1.3.6.1.4.1.28906.2.4.15 NAME 'acsjpegPhoto' DESC 'Ac
 cess to jpegPhoto Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {45}( 1.3.6.1.4.1.28906.2.4.16 NAME 'acsurl' DESC 'Access t
 o url Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.1
 5 SINGLE-VALUE )
olcAttributeTypes: {46}( 1.3.6.1.4.1.28906.2.4.17 NAME 'acsaltEmail' DESC 'Acc
 ess to altEmail Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {47}( 1.3.6.1.4.1.28906.2.4.18 NAME 'acspgpKeyId' DESC 'Acc
 ess to pgpKeyId Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {48}( 1.3.6.1.4.1.28906.2.4.19 NAME 'acsaimSn' DESC 'Access
  to aimSn Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.15 SINGLE-VALUE )
olcAttributeTypes: {49}( 1.3.6.1.4.1.28906.2.4.20 NAME 'acsxmppUri' DESC 'Acce
 ss to xmppUri Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.15 SINGLE-VALUE )
olcAttributeTypes: {50}( 1.3.6.1.4.1.28906.2.4.21 NAME 'acsmsnSn' DESC 'Access
  to msnSn Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.15 SINGLE-VALUE )
olcAttributeTypes: {51}( 1.3.6.1.4.1.28906.2.4.22 NAME 'acsscheduleInfo' DESC 
 'Access to scheduleInfo Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {52}( 1.3.6.1.4.1.28906.2.4.23 NAME 'acstwitterUser' DESC '
 Access to twitterUser Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {53}( 1.3.6.1.4.1.28906.2.4.24 NAME 'acsdiggUser' DESC 'Acc
 ess to diggUser Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {54}( 1.3.6.1.4.1.28906.2.4.25 NAME 'acsslashdotUser' DESC 
 'Access to slashdotUser Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {55}( 1.3.6.1.4.1.28906.2.4.26 NAME 'acsgooglecodeUser' DES
 C 'Access to googlecodeUser Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {56}( 1.3.6.1.4.1.28906.2.4.27 NAME 'acsgithubUser' DESC 'A
 ccess to githubUser Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {57}( 1.3.6.1.4.1.28906.2.4.28 NAME 'acsfreshmeatUser' DESC
  'Access to freshmeatUser Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {58}( 1.3.6.1.4.1.28906.2.4.29 NAME 'acsoccupation' DESC 'A
 ccess to occupation Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {59}( 1.3.6.1.4.1.28906.2.4.30 NAME 'acstimezone' DESC 'Acc
 ess to timezone Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {60}( 1.3.6.1.4.1.28906.2.4.31 NAME 'acsschool' DESC 'Acces
 s to school Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.15 SINGLE-VALUE )
olcAttributeTypes: {61}( 1.3.6.1.4.1.28906.2.4.32 NAME 'acsskill' DESC 'Access
  to skill Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.15 SINGLE-VALUE )
olcAttributeTypes: {62}( 1.3.6.1.4.1.28906.2.4.33 NAME 'acswikipediaUser' DESC
  'Access to wikipediaUser Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {63}( 1.3.6.1.4.1.28906.2.4.34 NAME 'acsclueNotes' DESC 'Ac
 cess to clueNotes Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {64}( 1.3.6.1.4.1.28906.2.4.35 NAME 'acsopenID' DESC 'Acces
 s to openID Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.15 SINGLE-VALUE )
olcAttributeTypes: {65}( 1.3.6.1.4.1.28906.2.4.36 NAME 'acsspokenLanguage' DES
 C 'Access to spokenLanguage Attribute' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15 SINGLE-VALUE )




From here down are the defualt ACL for the attributes.



dn: olcDatabase={1}bdb,cn=config
olcAccess: {0}to *  by dn.base="cn=admin,dc=cluenet,dc=org" write  by dn.regex
 ="uid=.*/admin,ou=people,dc=cluenet,dc=org" write  by dn.base="cn=replicator,
 dc=cluenet,dc=org" read  by * +0 break
olcAccess: {1}to attrs=userPassword,shadowLastChange  by anonymous auth  by * 
 none
olcAccess: {2}to attrs=clueSshPrivKey  by self write  by dn.base="cn=sshkeyrea
 d,dc=cluenet,dc=org" read  by * none
olcAccess: {3}to attrs=clueSignupInfo,suspendedPassword  by self read  by * no
 ne
olcAccess: {4}to attrs=authorizedService,host,krb5PrincipalName,clueAuthorized
 Ability,clueIrcNick,mailquota  by self read  by * read
olcAccess: {5}to dn.children="ou=people,dc=cluenet,dc=org" attrs=loginShell,co
 mmonName  by self write  by * read
olcAccess: {6}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsspokenLang
 uage  by self write  by * auth
olcAccess: {7}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsopenID  by
  self write  by * auth
olcAccess: {8}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsclueNotes 
  by self write  by * auth
olcAccess: {9}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acswikipediaU
 ser  by self write  by * auth
olcAccess: {10}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsskill  by
  self write  by * auth
olcAccess: {11}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsschool  b
 y self write  by * auth
olcAccess: {12}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acstimezone 
  by self write  by * auth
olcAccess: {13}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsoccupatio
 n  by self write  by * auth
olcAccess: {14}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsfreshmeat
 User  by self write  by * auth
olcAccess: {15}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsgithubUse
 r  by self write  by * auth
olcAccess: {16}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsgooglecod
 eUser  by self write  by * auth
olcAccess: {17}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsslashdotU
 ser  by self write  by * auth
olcAccess: {18}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsdiggUser 
  by self write  by * auth
olcAccess: {19}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acstwitterUs
 er  by self write  by * auth
olcAccess: {20}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsscheduleI
 nfo  by self write  by * auth
olcAccess: {21}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsmsnSn  by
  self write  by * auth
olcAccess: {22}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsxmppUri  
 by self write  by * auth
olcAccess: {23}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsaimSn  by
  self write  by * auth
olcAccess: {24}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acspgpKeyId 
  by self write  by * auth
olcAccess: {25}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsaltEmail 
  by self write  by * auth
olcAccess: {26}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsurl  by s
 elf write  by * auth
olcAccess: {27}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsjpegPhoto
   by self write  by * auth
olcAccess: {28}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsclueGener
 alContact  by self write  by * auth
olcAccess: {29}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsclueSshPu
 bKey  by self write  by * auth
olcAccess: {30}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsclueVoipU
 RI  by self write  by * auth
olcAccess: {31}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsclueSignu
 pInfo  by self write  by * auth
olcAccess: {32}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acstelephone
 Number  by self write  by * auth
olcAccess: {33}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acssn  by se
 lf write  by * auth
olcAccess: {34}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsmail  by 
 self write  by * auth
olcAccess: {35}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsclueBirth
 Year  by self write  by * auth
olcAccess: {36}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsclueGende
 r  by self write  by * auth
olcAccess: {37}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsl  by sel
 f write  by * auth
olcAccess: {38}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsst  by se
 lf write  by * auth
olcAccess: {39}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsc  by sel
 f write  by * auth
olcAccess: {40}to dn.children="ou=people,dc=cluenet,dc=org" attrs=acsgivenName
   by self write  by * auth
olcAccess: {41}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsgivenNa
 me=anon) attrs=givenName  by self write  by * read
olcAccess: {42}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsgivenNa
 me=user) attrs=givenName  by self write  by users read  by * none
olcAccess: {43}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsgivenNa
 me=none) attrs=givenName  by self write  by * none
olcAccess: {44}to dn.children="ou=people,dc=cluenet,dc=org" attrs=givenName  b
 y self write  by * none
olcAccess: {45}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsc=anon)
  attrs=c  by self write  by * read
olcAccess: {46}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsc=user)
  attrs=c  by self write  by users read  by * none
olcAccess: {47}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsc=none)
  attrs=c  by self write  by * none
olcAccess: {48}to dn.children="ou=people,dc=cluenet,dc=org" attrs=c  by self w
 rite  by * read
olcAccess: {49}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsst=anon
 ) attrs=st  by self write  by * read
olcAccess: {50}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsst=user
 ) attrs=st  by self write  by users read  by * none
olcAccess: {51}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsst=none
 ) attrs=st  by self write  by * none
olcAccess: {52}to dn.children="ou=people,dc=cluenet,dc=org" attrs=st  by self 
 write  by * none
olcAccess: {53}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsl=anon)
  attrs=l  by self write  by * read
olcAccess: {54}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsl=user)
  attrs=l  by self write  by users read  by * none
olcAccess: {55}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsl=none)
  attrs=l  by self write  by * none
olcAccess: {56}to dn.children="ou=people,dc=cluenet,dc=org" attrs=l  by self w
 rite  by * none
olcAccess: {57}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueGen
 der=anon) attrs=clueGender  by self write  by * read
olcAccess: {58}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueGen
 der=user) attrs=clueGender  by self write  by users read  by * none
olcAccess: {59}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueGen
 der=none) attrs=clueGender  by self write  by * none
olcAccess: {60}to dn.children="ou=people,dc=cluenet,dc=org" attrs=clueGender  
 by self write  by * none
olcAccess: {61}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueBir
 thYear=anon) attrs=clueBirthYear  by self write  by * read
olcAccess: {62}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueBir
 thYear=user) attrs=clueBirthYear  by self write  by users read  by * none
olcAccess: {63}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueBir
 thYear=none) attrs=clueBirthYear  by self write  by * none
olcAccess: {64}to dn.children="ou=people,dc=cluenet,dc=org" attrs=clueBirthYea
 r  by self write  by * none
olcAccess: {65}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsmail=an
 on) attrs=mail  by self read  by * read
olcAccess: {66}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsmail=us
 er) attrs=mail  by self read  by users read  by * none
olcAccess: {67}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsmail=no
 ne) attrs=mail  by self read  by * none
olcAccess: {68}to dn.children="ou=people,dc=cluenet,dc=org" attrs=mail  by sel
 f read  by * none
olcAccess: {69}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acssn=anon
 ) attrs=sn  by self write  by * read
olcAccess: {70}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acssn=user
 ) attrs=sn  by self write  by users read  by * none
olcAccess: {71}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acssn=none
 ) attrs=sn  by self write  by * none
olcAccess: {72}to dn.children="ou=people,dc=cluenet,dc=org" attrs=sn  by self 
 write  by * none
olcAccess: {73}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstelepho
 neNumber=anon) attrs=telephoneNumber  by self write  by * read
olcAccess: {74}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstelepho
 neNumber=user) attrs=telephoneNumber  by self write  by users read  by * none
olcAccess: {75}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstelepho
 neNumber=none) attrs=telephoneNumber  by self write  by * none
olcAccess: {76}to dn.children="ou=people,dc=cluenet,dc=org" attrs=telephoneNum
 ber  by self write  by * none
olcAccess: {77}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueSig
 nupInfo=anon) attrs=clueSignupInfo  by self read  by * read
olcAccess: {78}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueSig
 nupInfo=user) attrs=clueSignupInfo  by self read  by users read  by * none
olcAccess: {79}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueSig
 nupInfo=none) attrs=clueSignupInfo  by self read  by * none
olcAccess: {80}to dn.children="ou=people,dc=cluenet,dc=org" attrs=clueSignupIn
 fo  by self read  by * none
olcAccess: {81}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueVoi
 pURI=anon) attrs=clueVoipURI  by self write  by * read
olcAccess: {82}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueVoi
 pURI=user) attrs=clueVoipURI  by self write  by users read  by * none
olcAccess: {83}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueVoi
 pURI=none) attrs=clueVoipURI  by self write  by * none
olcAccess: {84}to dn.children="ou=people,dc=cluenet,dc=org" attrs=clueVoipURI 
  by self write  by * read
olcAccess: {85}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueSsh
 PubKey=anon) attrs=clueSshPubKey  by self write  by * read
olcAccess: {86}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueSsh
 PubKey=user) attrs=clueSshPubKey  by self write  by users read  by * none
olcAccess: {87}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueSsh
 PubKey=none) attrs=clueSshPubKey  by self write  by * none
olcAccess: {88}to dn.children="ou=people,dc=cluenet,dc=org" attrs=clueSshPubKe
 y  by self write  by * read
olcAccess: {89}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueGen
 eralContact=anon) attrs=clueGeneralContact  by self write  by * read
olcAccess: {90}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueGen
 eralContact=user) attrs=clueGeneralContact  by self write  by users read  by 
 * none
olcAccess: {91}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueGen
 eralContact=none) attrs=clueGeneralContact  by self write  by * none
olcAccess: {92}to dn.children="ou=people,dc=cluenet,dc=org" attrs=clueGeneralC
 ontact  by self write  by * none
olcAccess: {93}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsjpegPho
 to=anon) attrs=jpegPhoto  by self write  by * read
olcAccess: {94}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsjpegPho
 to=user) attrs=jpegPhoto  by self write  by users read  by * none
olcAccess: {95}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsjpegPho
 to=none) attrs=jpegPhoto  by self write  by * none
olcAccess: {96}to dn.children="ou=people,dc=cluenet,dc=org" attrs=jpegPhoto  b
 y self write  by * none
olcAccess: {97}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsurl=ano
 n) attrs=url  by self write  by * read
olcAccess: {98}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsurl=use
 r) attrs=url  by self write  by users read  by * none
olcAccess: {99}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsurl=non
 e) attrs=url  by self write  by * none
olcAccess: {100}to dn.children="ou=people,dc=cluenet,dc=org" attrs=url  by sel
 f write  by * read
olcAccess: {101}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsaltEma
 il=anon) attrs=altEmail  by self write  by * read
olcAccess: {102}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsaltEma
 il=user) attrs=altEmail  by self write  by users read  by * none
olcAccess: {103}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsaltEma
 il=none) attrs=altEmail  by self write  by * none
olcAccess: {104}to dn.children="ou=people,dc=cluenet,dc=org" attrs=altEmail  b
 y self write  by * none
olcAccess: {105}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acspgpKey
 Id=anon) attrs=pgpKeyId  by self write  by * read
olcAccess: {106}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acspgpKey
 Id=user) attrs=pgpKeyId  by self write  by users read  by * none
olcAccess: {107}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acspgpKey
 Id=none) attrs=pgpKeyId  by self write  by * none
olcAccess: {108}to dn.children="ou=people,dc=cluenet,dc=org" attrs=pgpKeyId  b
 y self write  by * none
olcAccess: {109}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsaimSn=
 anon) attrs=aimSn  by self write  by * read
olcAccess: {110}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsaimSn=
 user) attrs=aimSn  by self write  by users read  by * none
olcAccess: {111}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsaimSn=
 none) attrs=aimSn  by self write  by * none
olcAccess: {112}to dn.children="ou=people,dc=cluenet,dc=org" attrs=aimSn  by s
 elf write  by * none
olcAccess: {113}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsxmppUr
 i=anon) attrs=xmppUri  by self write  by * read
olcAccess: {114}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsxmppUr
 i=user) attrs=xmppUri  by self write  by users read  by * none
olcAccess: {115}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsxmppUr
 i=none) attrs=xmppUri  by self write  by * none
olcAccess: {116}to dn.children="ou=people,dc=cluenet,dc=org" attrs=xmppUri  by
  self write  by * none
olcAccess: {117}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsmsnSn=
 anon) attrs=msnSn  by self write  by * read
olcAccess: {118}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsmsnSn=
 user) attrs=msnSn  by self write  by users read  by * none
olcAccess: {119}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsmsnSn=
 none) attrs=msnSn  by self write  by * none
olcAccess: {120}to dn.children="ou=people,dc=cluenet,dc=org" attrs=msnSn  by s
 elf write  by * none
olcAccess: {121}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsschedu
 leInfo=anon) attrs=scheduleInfo  by self write  by * read
olcAccess: {122}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsschedu
 leInfo=user) attrs=scheduleInfo  by self write  by users read  by * none
olcAccess: {123}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsschedu
 leInfo=none) attrs=scheduleInfo  by self write  by * none
olcAccess: {124}to dn.children="ou=people,dc=cluenet,dc=org" attrs=scheduleInf
 o  by self write  by * none
olcAccess: {125}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstwitte
 rUser=anon) attrs=twitterUser  by self write  by * read
olcAccess: {126}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstwitte
 rUser=user) attrs=twitterUser  by self write  by users read  by * none
olcAccess: {127}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstwitte
 rUser=none) attrs=twitterUser  by self write  by * none
olcAccess: {128}to dn.children="ou=people,dc=cluenet,dc=org" attrs=twitterUser
   by self write  by * none
olcAccess: {129}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsdiggUs
 er=anon) attrs=diggUser  by self write  by * read
olcAccess: {130}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsdiggUs
 er=user) attrs=diggUser  by self write  by users read  by * none
olcAccess: {131}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsdiggUs
 er=none) attrs=diggUser  by self write  by * none
olcAccess: {132}to dn.children="ou=people,dc=cluenet,dc=org" attrs=diggUser  b
 y self write  by * none
olcAccess: {133}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsslashd
 otUser=anon) attrs=slashdotUser  by self write  by * read
olcAccess: {134}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsslashd
 otUser=user) attrs=slashdotUser  by self write  by users read  by * none
olcAccess: {135}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsslashd
 otUser=none) attrs=slashdotUser  by self write  by * none
olcAccess: {136}to dn.children="ou=people,dc=cluenet,dc=org" attrs=slashdotUse
 r  by self write  by * none
olcAccess: {137}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsgoogle
 codeUser=anon) attrs=googlecodeUser  by self write  by * read
olcAccess: {138}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsgoogle
 codeUser=user) attrs=googlecodeUser  by self write  by users read  by * none
olcAccess: {139}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsgoogle
 codeUser=none) attrs=googlecodeUser  by self write  by * none
olcAccess: {140}to dn.children="ou=people,dc=cluenet,dc=org" attrs=googlecodeU
 ser  by self write  by * none
olcAccess: {141}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsgithub
 User=anon) attrs=githubUser  by self write  by * read
olcAccess: {142}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsgithub
 User=user) attrs=githubUser  by self write  by users read  by * none
olcAccess: {143}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsgithub
 User=none) attrs=githubUser  by self write  by * none
olcAccess: {144}to dn.children="ou=people,dc=cluenet,dc=org" attrs=githubUser 
  by self write  by * none
olcAccess: {145}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsfreshm
 eatUser=anon) attrs=freshmeatUser  by self write  by * read
olcAccess: {146}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsfreshm
 eatUser=user) attrs=freshmeatUser  by self write  by users read  by * none
olcAccess: {147}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsfreshm
 eatUser=none) attrs=freshmeatUser  by self write  by * none
olcAccess: {148}to dn.children="ou=people,dc=cluenet,dc=org" attrs=freshmeatUs
 er  by self write  by * none
olcAccess: {149}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsoccupa
 tion=anon) attrs=occupation  by self write  by * read
olcAccess: {150}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsoccupa
 tion=user) attrs=occupation  by self write  by users read  by * none
olcAccess: {151}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsoccupa
 tion=none) attrs=occupation  by self write  by * none
olcAccess: {152}to dn.children="ou=people,dc=cluenet,dc=org" attrs=occupation 
  by self write  by * none
olcAccess: {153}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstimezo
 ne=anon) attrs=timezone  by self write  by * read
olcAccess: {154}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstimezo
 ne=user) attrs=timezone  by self write  by users read  by * none
olcAccess: {155}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acstimezo
 ne=none) attrs=timezone  by self write  by * none
olcAccess: {156}to dn.children="ou=people,dc=cluenet,dc=org" attrs=timezone  b
 y self write  by * none
olcAccess: {157}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsschool
 =anon) attrs=school  by self write  by * read
olcAccess: {158}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsschool
 =user) attrs=school  by self write  by users read  by * none
olcAccess: {159}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsschool
 =none) attrs=school  by self write  by * none
olcAccess: {160}to dn.children="ou=people,dc=cluenet,dc=org" attrs=school  by 
 self write  by * none
olcAccess: {161}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsskill=
 anon) attrs=skill  by self write  by * read
olcAccess: {162}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsskill=
 user) attrs=skill  by self write  by users read  by * none
olcAccess: {163}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsskill=
 none) attrs=skill  by self write  by * none
olcAccess: {164}to dn.children="ou=people,dc=cluenet,dc=org" attrs=skill  by s
 elf write  by * read
olcAccess: {165}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acswikipe
 diaUser=anon) attrs=wikipediaUser  by self write  by * read
olcAccess: {166}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acswikipe
 diaUser=user) attrs=wikipediaUser  by self write  by users read  by * none
olcAccess: {167}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acswikipe
 diaUser=none) attrs=wikipediaUser  by self write  by * none
olcAccess: {168}to dn.children="ou=people,dc=cluenet,dc=org" attrs=wikipediaUs
 er  by self write  by * none
olcAccess: {169}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueNo
 tes=anon) attrs=clueNotes  by self write  by * read
olcAccess: {170}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueNo
 tes=user) attrs=clueNotes  by self write  by users read  by * none
olcAccess: {171}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsclueNo
 tes=none) attrs=clueNotes  by self write  by * none
olcAccess: {172}to dn.children="ou=people,dc=cluenet,dc=org" attrs=clueNotes  
 by self write  by * none
olcAccess: {173}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsopenID
 =anon) attrs=openID  by self write  by * read
olcAccess: {174}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsopenID
 =user) attrs=openID  by self write  by users read  by * none
olcAccess: {175}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsopenID
 =none) attrs=openID  by self write  by * none
olcAccess: {176}to dn.children="ou=people,dc=cluenet,dc=org" attrs=openID  by 
 self write  by * none
olcAccess: {177}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsspoken
 Language=anon) attrs=spokenLanguage  by self write  by * read
olcAccess: {178}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsspoken
 Language=user) attrs=spokenLanguage  by self write  by users read  by * none
olcAccess: {179}to dn.children="ou=people,dc=cluenet,dc=org" filter=(acsspoken
 Language=none) attrs=spokenLanguage  by self write  by * none
olcAccess: {180}to dn.children="ou=people,dc=cluenet,dc=org" attrs=spokenLangu
 age  by self write  by * none
olcAccess: {181}to dn.base=""  by * read
olcAccess: {182}to *  by * read