try the latest HEAD code; the syntax is detailed in slapd.conf(5). HEADS-UP: now DN-based limits default to "exact" for consistency with access directives, and for performance and security considerations (exact is much less error prone and expensive than regex). Previously, they defaulted to "regex" which is now deprecated. p. -- Pierangelo Masarati mailto:pierangelo.masarati@sys-net.it