{"action":"opened","issue":{"url":"https://api.github.com/repos/devpi/devpi-ldap/issues/23","labels_url":"https://api.github.com/repos/devpi/devpi-ldap/issues/23/labels{/name}","comments_url":"https://api.github.com/repos/devpi/devpi-ldap/issues/23/comments","events_url":"https://api.github.com/repos/devpi/devpi-ldap/issues/23/events","html_url":"https://github.com/devpi/devpi-ldap/issues/23","id":120121107,"number":23,"title":"group_search returning no results","user":{"login":"Trozz","id":254896,"avatar_url":"https://avatars.githubusercontent.com/u/254896?v=3","gravatar_id":"","url":"https://api.github.com/users/Trozz","html_url":"https://github.com/Trozz","followers_url":"https://api.github.com/users/Trozz/followers","following_url":"https://api.github.com/users/Trozz/following{/other_user}","gists_url":"https://api.github.com/users/Trozz/gists{/gist_id}","starred_url":"https://api.github.com/users/Trozz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Trozz/subscriptions","organizations_url":"https://api.github.com/users/Trozz/orgs","repos_url":"https://api.github.com/users/Trozz/repos","events_url":"https://api.github.com/users/Trozz/events{/privacy}","received_events_url":"https://api.github.com/users/Trozz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-12-03T08:55:27Z","updated_at":"2015-12-03T08:55:27Z","closed_at":null,"body":"when performing ```devpi-ldap ldap.conf user0``` no groups are returned.\r\n\r\nif I perform the same search using ldapsearch it works without issues\r\n\r\n```ldapsearch -x -h LDAP.server -p 389 -s sub \"(&(uniqueMember=cn=user0,ou=Users,o=XXX))\"```\r\n\r\n\r\nldap.conf\r\n```\r\n---\r\ndevpi-ldap:\r\n  url: ldap://LDAP.server\r\n  user_template: CN={username},ou=Users,o=XXX\r\n  group_search:\r\n    base: ou=Groups,o=XXX\r\n    filter: (&(uniqueMember={userdn}))\r\n    attribute_name: CN\r\n```\r\n\r\n```\r\n2015-12-03 08:51:04,927 DEBUG EXTENDED:ldap message sent via <ldap://LDAP.server - cleartext - user: CN=user0,ou=Users,o=XXX - bound - open - <local: 10.0.0.1:36355 - remote: 10.0.0.2:389> - tls not started - listening - SyncStrategy>:\r\n>>LDAPMessage:\r\n>> messageID=2\r\n>> protocolOp=ProtocolOp:\r\n>>  searchRequest=SearchRequest:\r\n>>   baseObject=ou=Groups,o=XXX\r\n>>   scope='wholeSubtree'\r\n>>   derefAliases='derefAlways'\r\n>>   sizeLimit=0\r\n>>   timeLimit=0\r\n>>   typesOnly='False'\r\n>>   filter=Filter:\r\n>>    and=And:\r\n>>     Filter:\r\n>>      equalityMatch=EqualityMatch:\r\n>>       attributeDesc=uniqueMember\r\n>>       assertionValue=CN=user0,ou=Users,o=XXX\r\n>>   attributes=AttributeSelection:\r\n>>    cn\r\n2015-12-03 08:51:04,928 DEBUG NETWORK:sent 103 bytes via <ldap://LDAP.server - cleartext - user: CN=user0,ou=Users,o=XXX - bound - open - <local: 10.0.0.1:36355 - remote: 10.0.0.2:389> - tls not started - listening - SyncStrategy>\r\n2015-12-03 08:51:05,013 DEBUG NETWORK:received 14 bytes via <ldap://LDAP.server - cleartext - user: CN=user0,ou=Users,o=XXX - bound - open - <local: 10.0.0.1:36355 - remote: 10.0.0.2:389> - tls not started - listening - SyncStrategy>\r\n2015-12-03 08:51:05,013 DEBUG NETWORK:received 1 ldap messages via <ldap://LDAP.server - cleartext - user: CN=user0,ou=Users,o=XXX - bound - open - <local: 10.0.0.1:36355 - remote: 10.0.0.2:389> - tls not started - listening - SyncStrategy>\r\n2015-12-03 08:51:05,015 DEBUG EXTENDED:ldap message received via <ldap://LDAP.server - cleartext - user: CN=user0,ou=Users,o=XXX - bound - open - <local: 10.0.0.1:36355 - remote: 10.0.0.2:389> - tls not started - listening - SyncStrategy>:\r\n<<LDAPMessage:\r\n<< messageID=2\r\n<< protocolOp=ProtocolOp:\r\n<<  searchResDone=SearchResultDone:\r\n<<   resultCode='success'\r\n<<   matchedDN=\r\n<<   diagnosticMessage=\r\n2015-12-03 08:51:05,015 DEBUG BASIC:done SEARCH operation, result <False>\r\n2015-12-03 08:51:05,015 ERROR NOCTX Search failed (&(uniqueMember=CN=user0,ou=Users,o=XXX)) {'filter': '(&(uniqueMember={userdn}))', 'base': 'ou=Groups,o=XXX', 'attribute_name': 'cn'}: {'dn': '', 'referrals': None, 'description': 'success', 'result': 0, 'message': '', 'type': 'searchResDone'}\r\nResult: {\"groups\": [], \"status\": \"ok\"}\r\nAuthentication successful, the user is member of the following groups:\r\n```\r\n\r\n"}}