aci: (targetattr = "nsDirectoryURL || nsDirectoryFailoverList || nsBindPassword || nsBindDN ||  nsDirectoryInfoRef || objectClass") 
(version 3.0;acl "Console Anonymous Access To User & Groups Information";allow (read, compare, search)(userdn = "ldap:///anyone");)