Hanspeter Kunz writes: > actually the (ou:dn:=Administration) term is unnecessary, because this > is implied by (ou=Administration). It's not implied in LDAP, but maybe it is in your data. dn: ou=Cat herding,dc=example,dc=com ou: Cat herding ou: Administration objectClass: organizationalUnit -- Hallvard