access to attr=objectclass
by * =rsc stop
-access to filter="objectclass=person" attr=userpassword
+access to filter="(objectclass=person)" attr=userpassword
by anonymous auth
by self write
by dnattr=member selfwrite
by * read
-access to filter="objectclass=groupofnames"
+access to filter="(objectclass=groupofnames)"
by dn.base="cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US" =sc continue
by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" +rw stop
by * break