dn: olcDatabase={0}config
objectClass: olcDatabaseConfig
olcDatabase: {0}config
olcAccess: {0}to *
  by group/groupOfNames/member.exact="cn=@@@ADMINGROUP@@@,ou=groups,ou=core,ou=realm,@@@REALM_DCNAME@@@" write
  by dn.base="uid=@@@ADMINUSER@@@,ou=users,ou=core,ou=realm,@@@REALM_DCNAME@@@" write
  by dn.base="cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@" write
  by sockurl.regex="^ldapi:///$" write
  by dynacl/aci write
  by * none
olcAddContentAcl: TRUE
olcLastMod: TRUE
olcLimits: dn.exact="cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@" time.soft=unlimited time.hard=unlimited size.soft=unlimited size.hard=unlimited
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=config
olcRootPW: {SHA}@@@ROOTPW_SHA@@@
olcSyncUseSubentry: FALSE
olcMonitoring: FALSE
structuralObjectClass: olcDatabaseConfig
creatorsName: cn=config
createTimestamp: @@@TIMESTAMP@@@Z
entryCSN: @@@TIMESTAMP@@@.@@@TIMESTAMP_MICROSECONDS@@@Z#000000#000#000000
entryUUID: @@@ENTRYUUID@@@
modifiersName: cn=config
modifyTimestamp: @@@TIMESTAMP@@@Z