Dieter Kluenter wrote:
Bill Cole <[EMAIL PROTECTED]> writes:
The question in my Subject is what all this boils down to, so if you
have no time to read a long explanation, feel free to answer it as
asked...
[...]
Yes, it is valid to define a DIT with root "", but your clients should
point to a defined subtree.
Some of them certainly will, but since a critical goal is to have an
authentication system that works for users whose records may be anywhere in
a domain-based tree, having the ability to search from the root is essential.