The strpbrk is used to ensure that a valid DN is produce. The code probably should escape the value as necessary (of course, this makes for uglier regex'ing). Mark is working in this area, I'll leave it to him to sort out a reason path. You may want to comment on his proposal (on the devel list). Kurt