+ if ( ber_printf( ber, "s", proxydn ) == LBER_ERROR ) { + exit( EXIT_FAILURE ); + } I note that Mozilla encodes this using "{s}", that is, the value wasn't just a BER-encoded LDAPDN, but a BER-encoded SEQUENCE { LDAPDN }. Kurt