rootdn should be a required arg