Lukas Kubin writes: > access to dn="ou=(groups|users|services),dc=one,dc=two,dc=com$$" > attrs=mail I'm not sure if this is your problem, but: Use `attr=mail', not `attrs=mail'. The documentation is wrong. Or maybe the documentation is right according to some standard, but the implementation is wrong. Um. I think I'll file an ITS for that. -- Hallvard