Hello, I need an aci such that when a user of a group binds, he will be able to see only his attribute but not others. I tried the following but it gives syntax error. Please suggest (target = "ldap:///self") (targetattr = "*") (version = 3.0; acl "test acl"; allow (read,search) (groupdn = "ldap:///cn=internet,ou=groups,dc=example,dc=com") ; ) -thanks murthy