On 12.8.2016 19:13, Michael Sean Conley wrote: > role.filter= > (member=uid=%u,cn=users,cn=accounts,dc=aba,dc=house,dc=com) I suspect that this filter is incorrect. Likely, it should be only "(uid=%u,cn=users,cn=accounts,dc=aba,dc=house,dc=com)". I hope it helps. -- Petr^2 Spacek