Security Software

I'm crying uncle here. I'm trying to get a dynamic group set up so that memberships are, well, dynamic ;-)

I have created a group with top/orcldynamicgroups/group of names. The documentation says that I either need to choose labeledURI or the orclconnectby,etc. I have my labeledURI set to:

ldap://coddcdss10.cable.comcast.com:389/cn=Users,dc=cable,dc=comcast,dc=com??sub?(myattribute=Y)

Myattribute is indexable and searchable, and the query works from a web browser.

I would expect the member field to be populated automatically - I can do this in eTrust. I'm not comparing to the product - I know they are different - just trying to see if I can get the same behavior here. Is there some magic I have to do? Has anyone had success?

Thanks
Ray Harrison