Jim Sermersheim writes: > I'm not sure what the problem with this tree is. Are you saying that > there is a subordinate reference on the central server that points to > the empty DN on the local server? Yup. Anyway, as you can hopefully tell, my vote is to disallow subordinate refs to root. -- Hallvard