Should the server be allowed to fill the errorMessage field of LDAPResult even along with a non-error resultCode? The current text (4.1.9) implies yes, but that seems a bit strange to me. -- Hallvard