如何正确ldapmodifyreplaceolcAccess线？

这是来自olcDatabase = {1} hdb.ldif的一部分

olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=somesite,dc=com" write by * none olcAccess: {1}to dn.base="" by * read olcAccess: {2}to * by self write by dn="cn=admin,dc=somesite,dc=com" write by * read 

我by dn="cn=anotheruser,ou=Users,dc=somesite,dc=com" write {0}和{2}行。

在销毁我的LDAP服务器之前， 以下LDIF是否正确？

 dn: olcDatabase{1}hdb,cn=config changetype: modify replace: olcAccess olcAccess: {0}to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=somesite,dc=com" write by dn="uid=anotheruser,ou=Users,dc=somesite,dc=com" write by anonymous auth by self write by * none olcAccess: {2}to * by self write by dn="cn=admin,dc=somesite,dc=com" write by dn="cn=anotheruser,ou=Users,dc=somesite,dc=com" write by * read 

使用： ldapmodify -Y EXTERNAL -H ldapi:/// -f ./changes.ldif

• 通过主机名代理TCP
• 改进了Windows文件权限的ACL编辑器
• 文件所有权的新文件与pipe理员 – 为什么它给组pipe理员的所有权？
• 使用Powershellrecursion更改所有者？
• 如何让互联网面对TFTP服务器安全？

我的顾虑是：

• 有3 olcAccess:行，我没有包括{1}行，所以在提交ldif更改后它仍然在那里
• 是replace: olcAccess行是否正确？

 dn: olcDatabase{1}hdb,cn=config changetype: modify replace: olcAccess olcAccess: {0}to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=somesite,dc=com" write by dn="uid=anotheruser,ou=Users,dc=somesite,dc=com" write by anonymous auth by self write by * none olcAccess: {1}to dn.base="" by * read olcAccess: {2}to * by self write by dn="cn=admin,dc=somesite,dc=com" write by dn="cn=anotheruser,ou=Users,dc=somesite,dc=com" write by * read