I got more info with a different query... # RobertTest1, WANN, Departments, corp.development.com dn: CN=RobertTest1,OU=WANN,OU=Departments,DC=corp,DC=development,DC=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: RobertTest1 givenName: RobertTest1 distinguishedName: CN=RobertTest1,OU=WANN,OU=Departments,DC=corp,DC=development,DC=com instanceType: 4 whenCreated: 20110401191333.0Z whenChanged: 20110405164213.0Z displayName: RobertTest1 uSNCreated: 10906825 uSNChanged: 10913688 name: RobertTest1 objectGUID:: GsSgT0UjekqU6zZku/fn2A== userAccountControl: 66048 badPwdCount: 0 codePage: 0 countryCode: 0 badPasswordTime: 0 lastLogoff: 0 lastLogon: 129461649719116071 pwdLastSet: 12333394615881358096000007 primaryGroupID: 513 objectSid:: AQUAAAAAAAUVAAAAJRdSujUPgdGF4vwq+QgAAA== accountExpires: 9223372036854775807 logonCount: 1 sAMAccountName: RobertTest1 sAMAccountType: 805306368 userPrincipalName: RobertTest1@corp.development.com objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=corp,DC=development,DC=com dSCorePropagationData: 20110405164213.0Z dSCorePropagationData: 20110405164213.0Z dSCorePropagationData: 20110405164213.0Z dSCorePropagationData: 16010108151513.0Z # search result search: 2 result: 0 Success # numResponses: 6 # numEntries: 5 -- View this message in context: http://freeradius.1045715.n5.nabble.com/LDAP-group-filter-search-is-failing-... Sent from the FreeRadius - User mailing list archive at Nabble.com.