Is the default_profile setting in modules/ldap supposed to expand runtime variables? I tried to set: default_profile = "cn=default,ou=%{Realm},ou=profiles,dc=mc,dc=com" but on the logs I see: rlm_ldap: performing search in cn=default,ou=%{Realm},ou=profiles,dc=mc,dc=com rlm_ldap: object not found If I set: default_profile = "cn=default,ou=company,ou=profiles,dc=mc,dc=com" it works.