Here is the output from ldapwhoami ldapwhoami -x -h ldap1.example.com -D "uid=user1,ou=users,employees,ou=users,dc=example,dc=com" -w tt#12345 ldap_bind: Invalid DN syntax (34) additional info: invalid DN
ou=employees, not just employees.
Gavin.