Don't forget to add an acl like access to attrs=entry by * read See http://www.openldap.org/faq/data/cache/451.html for details. Bye, Benny