At 10:31 AM 1/26/01 -0800, malyprogservices@flashmail.com wrote: >access to dn=".+,ou=Aliases,dc=mvista,dc=com" attrs=rfc822MailMember > by dnattr=rfc822MailMember selfwrite > by * read dnattr requires an attribute of distinguishedName syntax. rfc822MailMember, IIRC, is a IA5 string. Hence the clause is bogus. Kurt