How do I tell ldapmodify just to delete 1 particular item with AttributeValue=X, and not all of them?
You do a delete+add, just like Dieter said. What you did in your example was a replace op.
I.e., you'd do something like: dn: <whatever> changetype: modify delete: mail mail: my-value - add: mail mail: my-value --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>