user dn nullable