Print

Avoid making the Base Search DN too specific

If you were to specify a base search DN of cn=development,cn=users,dc=example,dc=com the users in services and sales would not be able to establish a session. Instead, you should specify a base search DN that is less specific, such as cn=users,dc=example,dc=com.

Figure 1. DN entries and scope of search