# Start of LDAP Manager generated configuration

access to dn="cn=subschema" by * read

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=children,entry
          by * read

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=homePhone,homePostalAddress,mobile,pager
          by self write
          by dnattr=manager read
          by users auth
          by anonymous auth

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=mail,mailAlternateAddress,objectClass,uid
          by self read
          by dnattr=manager read
          by users read
          by anonymous read

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=o
          by self read
          by dnattr=manager read
          by users auth
          by anonymous auth

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=physicalDeliveryOfficeName,st,street,title
          by self read
          by dnattr=manager read
          by users read
          by anonymous read

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=manager,secretary
          by self read
          by dnattr=manager read
          by users read
          by anonymous auth

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=carLicense
          by self write
          by dnattr=manager read
          by users auth
          by anonymous auth

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=businessCategory,departmentNumber,postalAddress,postalCode,telephoneNumber
          by self read
          by dnattr=manager read
          by users read
          by anonymous read

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=roomNumber
          by self write
          by dnattr=manager read
          by users read
          by anonymous auth

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=employeeType
          by self read
          by dnattr=manager read
          by users auth
          by anonymous auth

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=cn,displayName,givenName,initials,l,ou
          by self write
          by dnattr=manager read
          by users read
          by anonymous read

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=description,facsimileTelephoneNumber,postOfficeBox,seeAlso,sn
          by self write
          by dnattr=manager read
          by users read
          by anonymous read

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=userPassword
          by self write
          by users auth
          by anonymous auth

access to dn.subtree="ou=mitarbeiter,dc=cytux,dc=de"
          filter=(objectclass=person)
          attrs=mailHost,mailRoutingAddress
          by self auth
          by users auth
          by anonymous auth

access to dn.subtree="ou=abteilung,dc=cytux,dc=de"
          filter=(objectclass=organizationalunit)
          attrs=children,entry
          by group="cn=System Administrators,ou=Abteilung,dc=cytux,dc=de" write
          by * read

access to dn.subtree="ou=abteilung,dc=cytux,dc=de"
          filter=(objectclass=organizationalunit)
          attrs=businessCategory,description,facsimileTelephoneNumber,l,ou,physicalDeliveryOfficeName,postOfficeBox,postalAddress,postalCode,searchGuide,seeAlso,st,street,telephoneNumber
          by self auth
          by dnattr=manager read
          by users read
          by anonymous read

access to dn.subtree="ou=abteilung,dc=cytux,dc=de"
          filter=(objectclass=organizationalunit)
          attrs=objectClass
          by self auth
          by users read
          by anonymous read

access to dn.subtree="ou=abteilung,dc=cytux,dc=de"
          filter=(|(objectclass=groupofnames)(objectclass=groupofuniquenames))
          attrs=children,entry
          by group="cn=System Administrators,ou=Abteilung,dc=cytux,dc=de" write
          by * read

access to dn.subtree="ou=abteilung,dc=cytux,dc=de"
          filter=(|(objectclass=groupofnames)(objectclass=groupofuniquenames))
          attrs=o
          by self read
          by users read
          by anonymous auth

access to dn.subtree="ou=abteilung,dc=cytux,dc=de"
          filter=(|(objectclass=groupofnames)(objectclass=groupofuniquenames))
          attrs=cn,objectClass,ou
          by self read
          by users read
          by anonymous read

access to dn.subtree="ou=abteilung,dc=cytux,dc=de"
          filter=(|(objectclass=groupofnames)(objectclass=groupofuniquenames))
          attrs=businessCategory,description,owner
          by self write
          by users read
          by anonymous auth

access to dn.subtree="ou=abteilung,dc=cytux,dc=de"
          filter=(|(objectclass=groupofnames)(objectclass=groupofuniquenames))
          attrs=seeAlso,uniqueMember
          by self write
          by users read
          by anonymous read

# End of LDAP Manager generated configuration