>(givenName=) requires givenName be defined with null value; I thought LDAP attributes couldn't have NULL values? Don't know whether I'm making this up, but... -- Luke -- Luke Howard | lukehoward.com PADL Software | www.padl.com