At 12:01 PM 9/9/2003, leifj@it.su.se wrote: >access to dn.subtree="" by > ... I note that you should be able to write: access to * by ... instead. Kurt