> freeradius binds as CN=freeradius,OU=noc,OU=batlab,DC=batlab,DC=corp 
> and ldapsearch binds as user2 at batlab.corp.
>
> Maybe this is the cause of different search operation results.
> -
>
No my filter is
filter = "(&(objectClass=user)(sAMAccountName=%{User-Name}))"
Regards.