A null suffix implies you're operating a "root" directory service. It certainly works for back-dnssrv (as demonstrated by ldap://root.openldap.org/), but I presume not in back-ldbm or other backends. Feel free to submit an ITS with specifics of the problem. Kurt