How are exceptional conditions in expanding groups/roles/subtrees to be handled? In particular, what is the ACM behavior when the groups/roles/subtrees cannot be fully expanded and the requestor's DN is not found in the partial set of DNs? Kurt