>I set defult access on my LDAP server to none. I need set >privileges to user postfix, who can find mail alias, drop attributes and >can't read all database. Is it possible ? Er? Yes. Did you make it past the first page of the OpenLDAP Administrator's Guide, the one with the "Table Of Contents" where it has a link to the "Access Control" section? ftp://kazoolug.org/pub/pdf/ldapv3.pdf