Hi Vinu, Yes, I think the only way to solve this problem is to create a ACI for each user. I do not like this idea because the Directory Server with too many ACIs becames slower. About to create objects under user objects (person or inetorgperson), I am sure it is possible because in the schema I am using I have some objects under users. If you have some data about the users and it is not possible to include it in the his object (you need several nodes), you have to store under user. Thanks, Jorge
