You see, I madew my own set of mistakes; this > access to dn.regex="^(.+,)?ou=.+,(dc=.+,?)+$" should have actually been access to dn.regex="^(.+,)?ou=.+,(dc=[^,]+)+$" in any case far from >>> access to dn="(.+,)?,ou=.+,(dc=.+,?)+$$" p. -- Pierangelo Masarati mailto:pierangelo.masarati@sys-net.it SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497