I've been reading (and actually experienced) that DN, not being a full class attribute, is not filterable (read : with wildcards / patterns).

I've been thinking about 'duplicating' the DN in an attribute since the hidden 'entryDN' attribute is not accessible either but that sounds ugly and redundant to me.

If there is a commonly used alternative to filtering DNs I'd be glad to hear.

Thanks.

Lorenzo Pastrana R&D Head @ Happy End -------------------------- Web Shop Multimédia Design Visual Communication & Publishing -------------------------- Tél.: +33 1 42 47 83 09 Fax.: +33 1 47 70 70 19 E-mail : lorenzo.pastrana@happyend.fr