dn.exact for EXTERNAL access