opendj-server-legacy/src/main/java/org/opends/server/authorization/dseecompat/GroupDN.java
@@ -129,7 +129,7 @@ public static boolean evaluate (Entry e, AciEvalContext evalCtx, AttributeType attributeType, DN suffixDN) { List<Attribute> attrs = e.getAttribute(attributeType); List<Attribute> attrs = e.getAllAttributes(attributeType); for(ByteString v : attrs.get(0)) { try { DN groupDN = DN.valueOf(v.toString());