This parameter specifies the RFC 2254 compliant LDAP search filter. The default is to match the login name with the uid attribute. Note that this filter should only return one entry. (uid=%u) (&(uid=%u)(objectclass=sambaSamAccount))