In response to a recent commit message... This is disallowed as ;binary only makes sense in the context of a protocol transfer element. That is, both userCertificate and userCertificate;binary refer to the same attribute (unlike cn and cn;lang-es which are separate attributes) and it wouldn't make sense to index the same attribute twice. Kurt