...does only work if the attribute has been defined in the schema file. I learned that this is intended, because it allows to check the syntax of the values. On the other side this is different from what the Netscape LDAP Server does. I wonder if there's any way to turn this feature off for OpenLDAP. Regards, Markus