dn: olcDatabase={1}mdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: to attrs=userPassword
  by self write
  by anonymous auth
  by * none
olcAccess: to attrs=shadowLastChange
  by self write
  by * read
olcAccess: to dn.sub="dc=plurasoft"
  by dn="gidNumber=154+uidNumber=146,cn=peercred,cn=external,cn=auth" read
olcAccess: to *
  by self read
  by * none