Modified: puppet/modules/openldap/templates/mandriva-dit-access.conf
===================================================================
--- puppet/modules/openldap/templates/mandriva-dit-access.conf 2010-12-14 18:29:40 UTC (rev 604)
+++ puppet/modules/openldap/templates/mandriva-dit-access.conf 2010-12-14 18:29:41 UTC (rev 605)
@@ -84,7 +84,7 @@
attrs=member
by dnattr=owner write
by group.exact="cn=Account Admins,ou=System Groups,<%= dc_suffix %>" write
- by users +sx
+ by users +srx
access to dn.regex="^cn=[^,]+,ou=(System Groups|Group),<%= dc_suffix %>$"
attrs=cn,description,objectClass,gidNumber