From looking at the source, apache (2.2.x) should do the right thing. I don't have LDAP to test ist, do you still encounter this problem with 2.2.x? Cheers, Stefan