At 05:15 PM 10/3/00 -0400, Marc Heckmann wrote: >access to dn="uid=([^,]+),portalId=ABC,ou=People,o=MyOrg" > by self write > by dn="uid=$1 \+ realm=foo" write > by anonymous auth > by * read > > Any suggestions? Thanks in advance. Trim the extra white space from the DN regex... i.e.: by dn="uid=$1\+realm=foo" write Kurt