George Holbert wrote: > Is there any way to give a filtered role an alternate base DN? It > seems like the search scope for filtered roles is limited to the > container in which it's created. This means a role created in > "cn=roles,dc=example,dc=com" will not apply to entries in > "ou=people,dc=example,dc=com". Is the only solution to create the > role above the ou=people container? That doesn't sound right. I thought that the base DN could be specified. Sorry I don't have the cycles to check the docs and/or the code right now, but I really thought that this was implemented already.