diff --git a/README.md b/README.md
index 2d3e19fc..89e9e78e 100644
--- a/README.md
+++ b/README.md
@@ -35,6 +35,12 @@ A tutorial with configuration examples is available in the [User Guide](docs/ind
 ./gradlew clean build shadowJar
 ```
 
+#### Build without unit tests
+
+```
+./gradlew clean build shadowJar -x test
+```
+
 The result is `build/libs/kafka-ldap-integration-<version>.jar`, which contains the authentication and authorization classes, along with all of their dependencies.
 
 **N.B.** This jar must be added to the classpath for the Kafka broker. The easist way to do that is to copy the jar into the directory `$KAFKA_HOME/libs`.
diff --git a/src/main/kotlin/com/instaclustr/kafka/ldap/LDAPConfig.kt b/src/main/kotlin/com/instaclustr/kafka/ldap/LDAPConfig.kt
index 031ede61..0b54f7dd 100644
--- a/src/main/kotlin/com/instaclustr/kafka/ldap/LDAPConfig.kt
+++ b/src/main/kotlin/com/instaclustr/kafka/ldap/LDAPConfig.kt
@@ -117,6 +117,6 @@ fun LDAPConfig.Config.toUserDN(user: String) = "$usrUid=$user,$usrBaseDN".toLowe
 fun LDAPConfig.Config.toUserDNNodes(user: String) =
         // assuming most use of Basta generated service accounts
         listOf(
-                "$usrUid=$user,ou=ApplAccounts,$usrBaseDN".toLowerCase(),
+                "$usrUid=$user,$usrBaseDN".toLowerCase(),
                 "$usrUid=$user,$usrBaseDN".toLowerCase()
         )