produce whole dn in SQL queries so we don't have to mungle it in code
[virtual-ldap] / etc /
drwxr-xr-x   ..
drwxr-xr-x - init.d