(ITS#6364) refint needs to have rootdn set