Now I need to move on to group membership - adding users to LDAP groups, and querying to confirm ... I am working with Tivoli Directory Server, so I cannot use anything that uses ADSI shortcuts.