Is there any rfc or work done on how to setup objectclasses for effective rights I know novell does this but that is specific to their product It would be nice with a solution that all ldap servers could agree on Best regards Andreas Bäck