allow setting of the rootdn