More generally, make sure you throw away any pre-V4 LDAP wiring and empty out/get rid of ldap-authn-config.xml and "start over". LDAP config is the one area we didn't abstract and that wasn't fully done until later releases, and it's not compatible. -- Scott