Colud be possible that an incorrect ACL policy degrades performance of ldap (a long time to obtain a free id for a new entry in the db)? Regards, Francesco