harry.jede@arcor.de wrote: > The cleanest approach is to modify your OU entries: > > objectClass: top > objectClass: organizationalUnit > objectClass: extensibleObject > > Now, all attributes which are defined in any schema are allowed :-) . That's what I consider bad advice and definitely not the cleanest approach. Ciao, Michael.