Hello everyone, In the access controls, you can specify all attributes allowed in an objectclass by using the @ notation. Is there a way to do something like "@inetOrgPerson, -cn" so indicate all the attributes allowed in inetOrgPerson but not the cn attribute? (this is obviously just an example) -- DK