I don't know anything about the issue, but there should be equivalent material for V4, under advanced topics, DN resolution. > I instead added the block just before the last line of my password-authn-config.xml. Whatever the right wiring is, that would be the logical place to put it, yes. -- Scott