I need a way to set permissions in LDAP. I cannot use the Access Control List as that attribute does not exist and it appears that Active Directory uses ntSecurityDescriptor which is not a multi-text field.

I would like to modify set ntSecurityDescriptor which in turn hopefully produces the coreect ACl with the correct ACE Fields.

Any suggestions would be helpful. Thanks in advance.