On Wed, Jan 07, 2004 at 04:11:49PM -0500, Brian Jones wrote: > If you happen to know off the top of your head what 'err=5' is in > openldap for a CMP operation, lemme know. Otherwise, I'll find it by > running slapd with '-d 128' or something. ldap.h defines LDAP_COMPARE_FALSE to 5, which suggests that the groupdn check got the necessary information, and that the user fails the groupdn requirement. Cheers, Nalin