!!! Overview [EDirectory] 8.7.3 and later versions support the extensible match filter for matching __ONLY__ on the "DN:" attributes. Other elements of the [Extensible Match] search filter, namely the matching rule, are treated as undefined and ignored. For [Example], LDAP search filter such as shown below are valid: {{{ (&(ou:dn:=sales)(objectclass=user)) (:dn:2.4.8.10:=Dino) (sn:dn:2.4.6.8.10:=Barbara Jones) }}} As long as the evaluation is part of the DN of the entries, then the they should be valid. !! Category %%category [eDirectory]%% !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]