[Fedora-directory-users] aci with group dn and self read

[C.S.R.C.Murthy]

Hello,

I need an aci such that when a user of a group binds, he will be able to 
see only his attribute but not others. I tried the following but it 
gives syntax error. Please suggest

(target = "ldap:///self") (targetattr = "*") (version = 3.0; acl "test 
acl"; allow (read,search) (groupdn = 
"ldap:///cn=internet,ou=groups,dc=example,dc=com") ; )

-thanks
murthy