Julian The ldif below will do the trick, replace the add: with replac;e if the attributes already exist. Rob dn: cn=config changetype: modify add: nsslapd-accesslog-mode nsslapd-accesslog-mode: 644 - add: nsslapd-errorlog-mode nsslapd-errorlog-mode: 644 -----Original Message----- From: Julian Kippels <kippels(a)hhu.de&gt; Sent: Monday, April 15, 2024 4:51 AM To: General discussion list for the 389 Directory server project. <389-users(a)lists.fedoraproject.org&gt; Subject: [389-users] Permission of log files ✉External message: Use caution. Hi, I am looking for a way to configure the default permission of the log files in /var/log/dirsrv/<instance>/* All the files there belong to dirsrv:dirsrv with the permission of 0600. I would like to have the default permission to be 0644 so that my external log-monitoring can access the files. Julian