Hi I am succeeded and I write here just for case if someone else needs it. I had to add rights to these two users. My ldif file: dn: l=Kranj,c=si changetype: modify add: aci aci: (targetattr = "*") (version 3.0; acl "give sysadmin full rights"; allow(all) (userdn = "ldap:///uid=mnadmin,ou=User,l=Kranj,c=SI" or userdn = "ldap:///uid=sysadmin,ou=User,l=Kranj,c=SI" or userdn = "ldap:///uid=openmnadmin,ou=User,l=Kranj,c=SI");) BR, Blaz _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx