At 07:56 AM 9/2/2004, Buchan Milne wrote: $ ldapsearch -x -LLL "cn=Domain *" cn >This search should not be matching the last 3 entries above ... No. Though it may seem odd to some, per the technical specifications, the substring "domain " is equivalent to the substring "domain" (just as "domain " and "domain" are equivalent directory strings. Kurt