> > Not sure, but if there is, it should be on (ignore authzid) by default. Please file a ticket. > Shucks, I was hoping for a quick answer, some setting I had overlooked. We're running a version that's about a year old, "389-Directory/1.2.11.15 B2013.100.2247". I think I'll stand up a test server running whatever version is currently in Stable and see if the issue might have already been fixed. I feel more comfortable opening a ticket on that release rather than on what we're running. -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users