Michael Ströder <michael(a)stroeder.com&gt; writes: > HI! > > Is it possible to grant access in an ACL by a certain attribute value of the > superior entry? > > I'd like to be able to disable bind for users based on a status flag in the > container entry under which all user entries reside. sets come to my mind. Something like access to cn=something by user & [cn=other\attributetype & value]

more on sets at http://www.openldap.org/faq/data/cache/1133.html