You don't see operational attributes by default when searching entry DSEs. But the root DSE is not an entry DSE, so you can see it's attributes by default. The same applies to the subschema DSE, which is not an entry. Mark Wahl, Directory Architect, Service Provider/Infrastructure Innosoft, part of Sun Microsystems, Inc.'s iPlanet alliance