At 12:52 PM 11/22/2006, Dieter Kluenter wrote: >man slapd.access(5) and http://www.openldap.org/faq/data/cache/52.html > >group/nisNetgroup/nisNetgroupTriple=cn=mynodes,ou=netgroup,dc=example,dc=com This won't work as values of nisNetgroupTriple are not DNs (or NameAndOptionalUIDs). See the referenced materials.