Hi,
I get its failing but I do not know what else to set it to, It is the
read the error. deduce the issue
[ldap] expand: (&(SAMAccountName=%{%{Stripped-User-Name}:-%{User-Name}}) -> (&(SAMAccountName=radius) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
thats wehat came out of the expansion of your current config
[ldap] performing search in dc=corp,dc=clearedgeit,dc=com, with filter (&(SAMAccountName=radius)
[ldap] ldap_search() failed: Bad search filter: (&(SAMAccountName=radius)
and thats the result
[ldap] search failed
which means that happens the binding and the searching are 2 different things. you had 'working' but failing search with uid - you've now just got a broken search I'd just hazard a guess that you should be using eg (&(sAMAccountName=%{Stripped-User-Name:-%{User-Name}) note how upper and lower case have been chosen. alan