diff --git a/source4/dsdb/samdb/ldb_modules/kludge_acl.c b/source4/dsdb/samdb/ldb_modules/kludge_acl.c
index 6e6da55..0638c1b 100644
--- a/source4/dsdb/samdb/ldb_modules/kludge_acl.c
+++ b/source4/dsdb/samdb/ldb_modules/kludge_acl.c
@@ -250,14 +250,14 @@ static int kludge_acl_callback(struct ldb_request *req, struct ldb_reply *ares)
 			case SECURITY_SYSTEM:
 				if (ac->allowedAttributesEffective) {
 					ret = kludge_acl_allowedAttributes(ac->module->ldb, ares->message,
-									"allowedClassesAttributesEffective");
+									"allowedAttributesEffective");
 					if (ret != LDB_SUCCESS) {
 						return ldb_module_done(ac->req, NULL, NULL, ret);
 					}
 				}
 				if (ac->allowedChildClassesEffective) {
 					ret = kludge_acl_childClasses(ac->module->ldb, ares->message,
-									"allowedClassesChildClassesEffective");
+									"allowedChildClassesEffective");
 					if (ret != LDB_SUCCESS) {
 						return ldb_module_done(ac->req, NULL, NULL, ret);
 					}
@@ -267,14 +267,14 @@ static int kludge_acl_callback(struct ldb_request *req, struct ldb_reply *ares)
 			case SECURITY_ADMINISTRATOR:
 				if (ac->allowedAttributesEffective) {
 					ret = kludge_acl_allowedAttributes(ac->module->ldb, ares->message,
-									"allowedClassesAttributesEffective");
+									"allowedAttributesEffective");
 					if (ret != LDB_SUCCESS) {
 						return ldb_module_done(ac->req, NULL, NULL, ret);
 					}
 				}
 				if (ac->allowedChildClassesEffective) {
 					ret = kludge_acl_childClasses(ac->module->ldb, ares->message,
-									"allowedClassesChildClassesEffective");
+									"allowedChildClassesEffective");
 					if (ret != LDB_SUCCESS) {
 						return ldb_module_done(ac->req, NULL, NULL, ret);
 					}