Basically, the attribute type description you provide is malformed. In place of fooBarComPersonRole-oid should be an OID in the dotted-decimal form. So, either figure out what the OID should be and use that, or otherwise form a proper attribute type description for the attribute type. In a pinch, you could allocate an OID yourself (from name space delegated to you). Kurt