Is it possible to trim down the length of the username used to query AD with ldap? For names longer than 20 characters I am getting "rlm_ldap: object not found or got ambiguous search result" returned. Thanks