In 2005 this was not possible, has this changed? filter=(groupname=(.+)) [1] https://www.openldap.org/lists/openldap-software/200501/msg00322.html -----Original Message----- To: openldap-technical Subject: Acl with variable in filter Is it possible to have a variable VAR in an acl filter? Something like this: to dn="sendmailMTAKey=test(a)bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc= aaaaa,dc=local" filter="(sendmailMTAMapValue=VAR1) by ssf=64 dn.exact="uid=VAR1,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=local" read