> I think it has to do with that irfAuthorizedService is a multi >-value attribute. It doesn't. > When I used uid, that is a single-value attribute it worked. Then one of those exists and has the expected value and the other doesn't. -- Scott