Help with Acl`s Ldap on Debian Sarge.-

[Michael Fernández "M." <mfernandez@sernam.cl>]

hi.. i need help with acl´s

 i`ve made some acl´s but this does not work,.

i have the follows bases:

for email accounts
dn: ou=accounts, ou=domain.tld, ou=postfix,o=organization 

mail=walala@domain.tld, ou=accounts, ou=domain.tld,
ou=postfix,o=organization
mail=walala1@domain.tld, ou=accounts, ou=domain.tld,
ou=postfix,o=organization
etc...


for alias
dn: ou=alias, ou=domain.tld, ou=postfix, o=organization
mail=walala2@domain.tld, ou=accounts, ou=domain.tld,
ou=postfix,o=organization
etc...

i have the user: cn=accountadmin, ou=users, o=organuization

The thing is that others persons need to access to the ldap server by
phpldapadmin, they need create, modify and erase accounts and alias..

How can i do an ACl that permits to this user erase, modidy and create
accounts and alias but NOT delete de main ou? (ou=alias, ou=domain.tld,
ou=postfix, o=organization / u=accounts, ou=domain.tld, ou=postfix,
o=organization )

Thanks a lot!!!

Michael.-