Jan-Frode Myklebust wrote: > Should this maybe be the "groupmembership_filter" instead of the "filter"? Quite possibly. But he was also talking about wanting to get reply attributes back. The debug output showed no reply attributes found in LDAP. Alan DeKok.