OpenLDAP 2.0.x
SASLによるACL

  % ldapsearch -D 'uid=foo+realm=hoge.example.com' -b 'dc=example,dc=com' 'cn=foo'
   SASL/DIGEST-MD5 authentication started
   Please enter your password: 
   SASL username: foo
   SASL realm: hoge.example.com
   SASL SSF: 1
   SASL installing layers
   version: 2
   #
   # filter: cn=foo
   # requesting: ALL
   #
   # foo, People, dc=example, dc=com
   dn: cn=foo, ou=People, dc=example, dc=com
   objectClass: top
   cn: foo
   userPassword:: e1NTSef9WWJozmORmEIrEm5sUmtNdktIb05leENyTmpASTBwejk=
   # search result
   search: 5
   result: 0 Success
   # numResponses: 2
   # numEntries: 1