> freeradius binds as CN=freeradius,OU=noc,OU=batlab,DC=batlab,DC=corp > and ldapsearch binds as user2 at batlab.corp. > > Maybe this is the cause of different search operation results. > - > No my filter is filter = "(&(objectClass=user)(sAMAccountName=%{User-Name}))" Regards.