>after a couple of days I figured that I do have to (manually?) create >metadata in the MySQL backend to map any LDAP schema. What meta-data must you manually create? If you mean tying virtual dn's to a key in a table, you should declare a trigger for inserting rows into the table that populates the appropriate meta-data table