Assigning user access to parts of tree

[Raj Mathur <raju@sgi.com>]

How does one go about assigning varying access and password control to
different parts of the tree to various users?  I.e. userA can read and
write "dn:ou=virtualDomain,dc=abcd,dc=com" while userB can read/write
"dn:ou=virtualHost,dc=abcd,dc=com" but only read userA's DN.

Is this in a FAQ somewhere?  If so, a pointer would be appreciated.

Regards,

-- Raju