There's another problem: if a client tries to use a control supported by back-bdb, but not by back-dnssrv, then it fails with unavailable critical extension. Presumably this hasn't been noticed before as generally one glues like backends together. Sounds like backend_check_restrictions() needs to be made glue-aware? -- Luke --