On Jan 20, 2016, at 9:47 AM, Thomas Stather <Thomas.Stather at mpimf-heidelberg.mpg.de> wrote: > Ok which one of the following 2 statement is correct: Both might work if you fix the syntax. But I suggest *trying* it. I don't have access to your LDAP database or schema, so I can only offer general help. Alan DeKok.