LDAP access question

[Peter Furmonavicius <peter.furmonavicius@yale.edu>]

Hello.  I can restrict what LDAP searches return by using statements 
such as the following in my "slapd.conf" file.  For example, to not 
return the attribute values for "employeeNumber"...
--------------
access to attr=employeeNumber
       by dn="cn=boss,dc=here,dc=com"  write
       by users read
       by * none
--------------
However, I have been unsuccessful in figuring out a way to not return 
the "objectclass", or objectclass values.  Can anyone help me out 
with this?  I do not want the "objectclass"es returned to any 
anonymous searches.

Thanks in advance.

- peter