eliminating anonymous filter: mail=*

[Charles Rouzer <vitalit@earthlink.net>]

	Just curious if anyone has a successful way of eliminating a wildcard
search of the mail attribute.  I want to allow specific searches (this
would be a compare, no?  if so how do I allow reading of the entry if
the compare is successful).  Below is my broken slapd.conf:  
Thanks!

access to filter="(mail=\*)"
        by * none
access to attr=mail,entry
        by * read     
access to attr=userpassword
        by self write     
        by * none   
access to *                  
        by self write
        by dn=".+" read
        by * none