# Horde
access to dn.sub="ou=People,ou=Entities,ou=SAM,@SUFFIX@" attrs=@hordePerson
	by group="cn=DSA,ou=Administrators,ou=Access Control,@SUFFIX@" write
	by group="cn=Horde,ou=Administrators,ou=Access Control,@SUFFIX@" write
	by * none