base_dn is no longer required