Now it is working, with the following ACL:
access to
dn.regex="^cn=(.*),ou=([^,]+),ou=PersonalAddressBook,suffix$"
by dn.regex="uid=$2,.*,ou=People,dc=suffix$" write-- Jeronimo Zucco LPIC-1 Linux Professional Institute Certified Núcleo de Processamento de Dados Universidade de Caxias do Sul
http://jczucco.blogspot.com