Once again an update of this patch:

One more step further dnattr's documented behaviour: Now the DN in dnattr is additionally allowed to remove the whole entry.

The update can be found here: ftp://ftp.openldap.org/incoming/Daniel-Pluta-110422.patch

I'm not quite satisfied with my code and its internal processing. It's more some kind of a prototype. Probably you guys do have the knowlege to "convert" it into a better and slapd-like design...

Thanks a lot!