I should mention that I have a few machines still running on FRS 3.0.4, with the same ldap config and filter, and this user is returned correctly during those auth requests. ________________________________ From: Mark Williams <martialstudy@hotmail.com> Sent: Tuesday, October 18, 2016 10:44 AM To: FreeRadius users mailing list Subject: Transformation of the + symbol -- FRS 3.0.11 Any idea why the + symbol is being transformed in the ldap filter? Should I be using a different syntax for the attribute substitution? (12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Checking for suffix after "@" (12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Looking up realm "vt.edu" for User-Name = "adp+ipad@vt.edu" (12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Found realm "~vt.edu$" (12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Adding Stripped-User-Name = "adp+ipad" (12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Adding Realm = "vt.edu" (12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Authentication realm is LOCAL (12813372) Tue Oct 18 10:08:33 2016: Debug: [suffix] = ok (12813372) Tue Oct 18 10:08:33 2016: Debug: update control { (12813372) Tue Oct 18 10:08:33 2016: Debug: } # update control = noop (12813372) Tue Oct 18 10:08:33 2016: Debug: eap: Peer sent EAP Response (code 2) ID 12 length 74 (12813372) Tue Oct 18 10:08:33 2016: Debug: eap: No EAP Start, assuming it's an on-going EAP conversation (12813372) Tue Oct 18 10:08:33 2016: Debug: [eap] = updated (12813372) Tue Oct 18 10:08:33 2016: Debug: [files] = noop (12813372) Tue Oct 18 10:08:33 2016: Debug: ldap: EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}}) (12813372) Tue Oct 18 10:08:33 2016: Debug: ldap: --> (uid=adp\5c2bipad) (12813372) Tue Oct 18 10:08:33 2016: Debug: ldap: Performing search in "ou=People,ou=NIS,o=vt" with filter "(uid=adp\5c2bipad)", scope "sub" (12813372) Tue Oct 18 10:08:33 2016: Debug: ldap: Waiting for search result... (12813372) Tue Oct 18 10:08:33 2016: Debug: ldap: Search returned no results (12813372) Tue Oct 18 10:08:33 2016: Debug: [ldap] = notfound <http://aka.ms/weboutlook>