Or googling a bit more, is it meant to be something like.. CN=username,CN=Users,DC=example,DC=com -- Paul Newman ------------------------------------------------------ Senior PHP Developer Centre for Engineering and Design Education Loughborough University ------------------------------------------------------ From: Paul Newman Subject: RE: WebPA LDAP support Hi, Unfortunately, I don’t know enough about LDAP/AD to know what's missing here. Is the DN binding simply a case of using 'dc=example,dc=com,-name username' instead of [log in to unmask] or is there a lot more to it?