AD LDS - Search fails - Must one bind as a user who is also under the readers role?

Hi,

I wrote a test program to successfully bind to my LDS server.  The server acts as a proxy to AD.

However when I try to do a search I get object not found error.

None of my users is under any roles container in LDS.  All my users are in Users container directly underneath my app partition.  Do they also need to be in the Readers role?  If so, how do I get them there?

Thanks.

javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031522C9, problem 2001 (NO_OBJECT), data 0, best match of:
 'DC=AppPartFE,DC=com'
]; remaining name 'cn=Users,dc=AppPartFE,dc=com'
 at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
 at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
 at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
 at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
 at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
 at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
 at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
 at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)
 at javax.naming.directory.InitialDirContext.search(Unknown Source)
 at Test.<init>(Test.java:70)
 at Test.main(Test.java:118)

leo