That seems fairly definitive.
Can you bind to LDAP using that DN with the given user's password? I'd start there.
The user is unable to bind to LDAP using that DN. The user can authenticate using the actual email address though. Testing with a user from the primary domain, I was able to bind to LDAP using the DN format. i.e. "uid=joseph.test,ou=Central Management,ou=Users,dc=madeupdomain,dc=com". I keep telling Google that the issue appears to be on their end, but they say it is a FreeRADIUS issue. I cannot see how that could be the case since the user cannot bind using the full DN. Wayne Sprouse, CNA,CCNA,CEH,A+ -- "The foregoing electronic message and any files transmitted with it are confidential and are intended only for the use of the intended recipient named above. This communication may contain material protected by the Family Educational Rights and Privacy Act (FERPA). If you are not the intended recipient, copying, distribution or use of the contents of this message is strictly prohibited. If you received this electronic message in error, please notify us immediately at (228-864-1146**)."**