This is covered in the FAQ: http://www.openldap.org/faq/index.cgi?file=138 > Is there special binding rules that applies with Netscape? Netscape Communicator, by default, does a (so-called) friendly bind. That is, it uses the provided login name to select the bind DN. Details are provided in document referenced in above FAQ answer.