dn: olcDatabase={2}mdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: to *
  by ssf=128 group/groupOfEntries="cn=admins,ou=groups,o=tutorial" read
  by * none

