> The main problem seems to be that LDAP query can't start at the root of my > namespace. This would make it more simple in comlex AD structures. I don't see, where the problem is: 'search_dn' => 'DC=sub,DC=domain,DC=tld', -- Denis Ovsienko