[apologies if you're receiving duplicates of this, Christoph and Frankie; I always forget who the BTS copies by default]
This thread on the ProFTPD forums is related: http://forums.proftpd.org/smf/index.php?topic=3528.0 In a nutshell, RFC 2255 specifies that the default search scope for an LDAP URL is 'base' (when no scope is explicitly specified). I understand that 'subtree' is generally what people want in this case, but I'm inclined to follow what's outlined in the RFC. Arguments to the contrary are welcome, but please keep in mind that I like to adhere to standards as much as possible. :-) FWIW, I updated the docs for LDAPServer at the time to mention this: Note that the default search scope for LDAP URLs is 'base' if a scope is not explicitly specified in the URL. This behavior differs from the LDAPSearchScope directive, which defaults to 'subtree'. john -- John Morrissey _o /\ ---- __o [EMAIL PROTECTED] _-< \_ / \ ---- < \, www.horde.net/ __(_)/_(_)________/ \_______(_) /_(_)__ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]