Thanks for the spot-on response. Your suggestion to use :3268 worked. Being relatively new to LDAP/AD, I'm curious as to why, when the query was submitted from the Linux command line using ldapsearch(1) or from Windows using LDAPBrowser 2.6, A/D didn't send a redirect. -----Original Message----- From: Eric Covener [mailto:covener@xxxxxxxxx] Sent: Wednesday, October 10, 2007 7:13 PM To: users@xxxxxxxxxxxxxxxx Subject: Re: Apache LDAP module prepends CN=Configuration to Base DN? On 10/10/07, Jim Garrison <Jim.Garrison@xxxxxxxxx> wrote: > Why is Apache adding CN=Configuration to the BaseDN? Is there a way to > force it to use the BaseDN we specify? > A packet capture would probably show you that MSAD sent you an LDAP referral that included CN=Configuraton. Using the global catalog port, or putting ADAM (active directory application mode) in front of AD are ways to resolve the unwanted referrals. IMPORTANT NOTICE: This message may contain confidential information. If you have received this e-mail in error, do not use, copy or distribute it. Do not open any attachments. Delete it immediately from your system and notify the sender promptly by e-mail that you have done so. Thank you. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx