# Samba
access to dn.subtree="ou=SAM,@SUFFIX@" attrs=sambantpassword,sambalmpassword,sambapasswordhistory,sambabadpasswordcount,sambabadpasswordtme,sambapwdcanchange,sambapwdmustchange
	by dn.exact=”uid=cifsdc,ou=Entities,ou=Access Control,@SUFFIX@" write
	by * none