I tried that as well. I used memberof=cn=osticket,ou=Groups,dc=test,dc=com as the search base. But openldap is getting the logs as it tries to search SRCH base="memberOf=cn\3Dosticket,ou=Groups,dc=test,dc=com" cn= is changed to \3Do automatically. Is this a bug?