OpenLDAP's default subschemasubentry (cn=schema) list "subschema", "extensibleObject", and "top" as objectclass values. I just realized that "subschema" is defined in RFC2252 as AUXILIARY and as such our subschema subentry is without a STRUCTURAL objectclass. What is the recommended STRUCTURAL objectclass for subschema subentries? Kurt