Hello,   I am really sorry for posting in such an old post; I know that is not really a good practice... but I ran into this issue, and I think I can explain why this happens... So I hope other people finding this question, might be helped a little bit by this remark;   There seems to be a limit in the lenght that SAS actually forwards to the ldapsearch; Your filter is being cut off, at about character: 101-ish   So what SAS queries to your ldap (or AD) is this: (&(memberOf:1.2.840.113556.1.4.1941:=CN=SAS VA Users,CN=Users,DC=marshall,DC=edu) (objectclass=perso instead of: (&(memberOf:1.2.840.113556.1.4.1941:=CN=SAS VA Users,CN=Users,DC=marshall,DC=edu) (objectclass=person))   Basically by making your string shorter, your query get completely send to the ldapsearch... and for that reason actually resulting in output.   My logic about the 101 character might be off, as this could also be 255 (more logic number in computer terms) for the complete ldapsearch string... and since the searchfilter is in the end, that is the one actually being cut off.   Hope this helps to anyone running into this issue;   With kind regards, Jelle ... View more