IIRC I think version of OpenLDAP 2.2.X or later do not understand access to attribute=... Change it to: access to attrs=... Gary ... access to attribute=userPassword,sambaNTPassword,sambaLMPassword by dn="cn=Manager,dc=rumonorte,dc=org" write by anonymous auth by self write by * none ...