This parameter specifies the RFC 2254 compliant LDAP search filter. The default is to match the login name with the uid attribute for all entries matching the sambaAccount objectclass. Note that this filter should only return one entry. Default: ldap filter = (&(uid=%u)(objectclass=sambaAccount))