Proposal to add ldap flexability in DIT layout

[Shahms E. King]

Well, after poking around for a while, I remembered why I didn't
implement two different bases before: searches on rid and uid are mildly
problematic because we don't know whether to search for a machine or
user account, however, in that same poking around I think I might have
found a (semi-)reasonable solution... stay tuned.

--Shahms