dn: olcDatabase={0}config,cn=config
changetype: modify
replace: olcAccess
olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" write by dn.base="cn=manager,dc=acme-services,dc=org" read by * none

# replace: olcRootDN
dn: olcDatabase={2}bdb,cn=config
changetype: modify
replace: olcRootPW
olcRootPW: {SSHA}f0pv70XFFox5UqKc6A4Uy39NcxkqcJbc
-
replace: olcAccess
olcAccess: {0}to attrs=userPassword by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" write by dn.base="cn=manager,dc=acme-services,dc=org" write by anonymous auth by self write by dn="uid=syncrepl,ou=systems,dc=acme-services,dc=org" read by * none
olcAccess: {1}to * by self write by users read by * none
-
replace: olcSuffix
olcSuffix: dc=acme-services,dc=org
-
replace: olcRootDN
olcRootDN: cn=manager,dc=acme-services,dc=org

dn: olcDatabase={1}monitor,cn=config
changetype: modify
replace: olcAccess
olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" read by dn.base="cn=manager,dc=acme-services,dc=org" read by * none