// The AP must be the parent Dn, but we also have to check that the given Dn
// is not the rootDSE or a NamingContext
if ( dn.isRootDse() || isNamingContext( dn ) )
{
// Not allowed : we can't get a parent in those cases
throw new LdapOtherException( "Cannot find an AdministrativePoint for " + dn );
}
// Get the administrativePoint role : we must have one immediately
// upper
Dn apDn = dn.getParent();