This class defines a root user, which is automatically granted a set of privileges in the server and may be given some special abilities not available to non-root users (e.g., the ability to bind to the server in lockdown mode). ds-cfg-root-dn-user top Specifies one or more alternate DNs that may be used to bind to the server as this root user. This root user will only be allowed to bind using the DN of the associated configuration entry. ds-cfg-alternate-bind-dn