idnsAllow{Query,Transfer} attributes are currently multi-value.
ACLs are processed sequentially but LDAP doesn't guarantee order of values. All elements of ACL should be present in one attribute instead of in multiple attributes.
Fixed:
http://git.fedorahosted.org/git?p=bind-dyndb-ldap.git;a=commit;h=d33510c634add8124e401d9c4cc0ac90cc5abb4e
Metadata Update from @atkac: - Issue assigned to atkac
Log in to comment on this ticket.