Hi all, I think there's a little bug in ldap_auth.py, indeed for the parameter filterstr of ldap_auth(..) (line 10), the default value is set to (objectClass=*) and during the call of search_ext_s (line 97), the filter argument is constructed with "(&(sAMAccountName=%s)(%s))" % (username_bare, filterstr)
which will introduce double parenthesis around objectClass=* . I suggest to remove them from the default parameter value. Regards all!
