Very interesting! Thank you for the info.
-Matt
An ACL specifier must have DistinguishedName syntax. memberUid uses the wrong syntax. memberUid is obsolete, you should be using RFC2307bis and groupOfNames/member instead of memberUid.
-- Howard Chu Chief Architect, Symas Corp. Director, Highland Sun http://www.symas.com http://highlandsun.com/hyc Symas: Premier OpenSource Development and Support