Help With ACL in SUNONE

Question

i have two mail servers , First email server wants to authenticate users in ou=people tree whose affiliation attribute value says staff.
second email server wants to authenticate users in ou=people tree whose affiliation attribute value says vendor
I am thinking creating two special user accounts one for each mail server. then add acl to that account so it will let autheticate users based on thier role.
am i making sense if the question is confusing please let me know i will try to repharse it.
Thanks for your time.
appreciate any input.

Answer 1

Hi,
I think you had some doubts, but you are right it doesn't make any sense.
your need is to give your users access to the branch "ou=people", which means that you have to create an ACL on the ou itself, by creating two different groups with rights on the ou=people.
That also implyies that every time you create a new user, you have to add it to your group, or to to use dynamic group membership by filtering on the values staff or vendors.
Bye