Is there any way to give a filtered role an alternate base DN? It seems like the search scope for filtered roles is limited to the container in which it's created. This means a role created in "cn=roles,dc=example,dc=com" will not apply to entries in "ou=people,dc=example,dc=com". Is the only solution to create the role above the ou=people container? Thanks, -- George