diff --git a/README.md b/README.md
index 1ae2d6f..6cafb27 100644
--- a/README.md
+++ b/README.md
@@ -10,8 +10,8 @@ requires this interface and to bind it to the loopback interface.
 The format that the LDAP bridge exposes data in is slightly different
 to that which is presented to an actual NetAuth client.  The groups
 are presented in a flattened format with all expansions processed, and
-all groups are precented under a special `cn=groups` path.  Similarly,
-entities are presented under a `cn=entities` path under the base DN.
+all groups are precented under a special `ou=groups` path.  Similarly,
+entities are presented under a `ou=entities` path under the base DN.
 
 Speaking of the base DN, NetAuth doesn't have such a concept, so the
 LDAP bridge takes this as a seperate configuration item on startup.