#!/bin/bash

 . ./settings.sh

(
    echo "dn: ou=People,${hosted_domain_rootdn}"
    echo "changetype: modify"
    echo "add: aci"
    echo "aci: (targetattr = \"*\") (version 3.0;acl \"Hosted Kolab Services\";allow (all)(userdn = \"ldap:///uid=hosted-kolab-service,ou=Special Users,${rootdn}\");)"
    echo ""
) | ldapmodify -x -h ${ldap_host} -D "${ldap_binddn}" -w "${ldap_bindpw}"