Initializing ACLs with TDBM or LDBM

The TDBM or LDBM backend adds an ACL to each suffix entry if no aclEntry value is specified during the add of this entry (whether the add was done by using ldapadd or ldif2ds). This improves performance of future ACL modifications made to an ACL placed on the suffix entry. The ACL that is used is:

aclEntry: cn=anybody:normal:rsc:system:rsc 
aclPropagate: TRUE

Similarly, if no entry owner is specified when the suffix entry is created, entryOwner is added to the entry with a value set to the root administrator DN (adminDN configuration option), along with ownerPropagate TRUE.