Hi, > You must erase blank after commas, like that: > > access to * by dn="cn=admin,ou=People,o=Universitaet Marburg,c=DE" > write > > otherwise nothing can match. You can see in log matching is tried with the Thank you very much! Now it works as expected. Kind Regards, Thomas