When I try to query the root of my AD with scope LDAP_SCOPE_SUBTREE ldap_search_ext_s() fails with "Operations error". It happens only when I set the ldap_search_options.base to the domain DN (eg. DC=example,DC=com). If I use a more specific base, such as CN=Computers,DC=example,DC=com the operation succeeds. Is there a limitation to the search function?

pseudocode snippet:

```
ldap_search_options ldap_opts;
ldap_opts.base    = "DC=example,DC=com";
ldap_opts.scope   = LDAP_SCOPE_SUBTREE;
```