base_dn determination