Hanspeter Kunz writes:
actually the (ou:dn:=Administration) term is unnecessary, because this is implied by (ou=Administration).
It's not implied in LDAP, but maybe it is in your data.
dn: ou=Cat herding,dc=example,dc=com ou: Cat herding ou: Administration objectClass: organizationalUnit