Hi, My original setting had the users base DN set as: OU=test,DC=example,DC=com
But since it returned too many users I changed it to: OU=ActiveUsers,OU=test,DC=example,DC=com However, all the users from other OUs are still present. This happens because my getOneFilter looks like this: &(mail={mail})(objectClass=user)) And this filter finds any user. Since I cant use distinguishedName with wildcards, how can i refine the filter to only return users that are under the users base DN? Thanks, Lior _______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list lsc-users@lists.lsc-project.org https://lists.lsc-project.org/cgi-bin/mailman/listinfo/lsc-users