Using the ldifde utility

If you are not sure whether the distinguished name in your configuration file is correct, you can generate a quick dump of the LDAP environment on a Window system by logging in there and running a command like ldifde -f ldap.out. This will produce a dump of the LDAP environment (without password information) into the file ldap.out, which you can then examine with a text editor. This can make it easy for you to ensure that you are using the right DN, CN, and DC portions of the URI that you are specifying.