Now it is working, with the following ACL:
access to
dn.regex="^cn=(.*),ou=([^,]+),ou=PersonalAddressBook,suffix$"
by dn.regex="uid=$2,.*,ou=People,dc=suffix$" write-- Jeronimo Zucco LPIC-1 Linux Professional Institute Certified NĂșcleo de Processamento de Dados Universidade de Caxias do Sul http://jczucco.blogspot.com
