Only other thing I could maybe think of is if the base dn is off somehow...