Don't use 'dn', this attribute does not exist with the LDAP backend,