This is not indicative of a bug in OpenLDAP. In both cases, the modification would result in an entry which did not conform to the subschema and, hence, are disallowed. Kurt