>>This is an interesting point. So, um, what exactly is the solution to using referrals in a protocol that allows servers in the chain to not support critical extensions? It seems that the safest thing for a client to do is use LDAP v2. :-(. Robert Allen rja@sun.com