> I believe that CN is a multivalued attribute (at least in FDS). So, if > it's any help, you could have unique CNs that are used in the entries' > DNs, and optionally have additional CNs that may not be unique. That works well in FDS, but not in AD and entryDNs with multivalued CNs won't sync over. -- El?as Halld?r ?g?stsson | Elias Halldor Agustsson Unix Kerfisstj?ri | Unix Systems Administrator Reiknistofnun H?sk?la ?slands | University of Iceland Computing Services http://elias.rhi.hi.is/ | +354 525 4903