adAuthenticator BAD_NAME but Login Success

[Klingenstein, Nate]

Using adAuthenticator with AD, I'm appropriately rejected for the wrong credentials.  However, entering the right credentials returns an error along with the success, though.  Nothing breaks and it's a DEBUG-level message, but I'd like to understand why I'm getting it if possible.

016-07-29 11:23:52,907 - DEBUG [org.ldaptive.auth.FormatDnResolver:157] - Formatting DN for helloworld with %s at campus.csu.edu
2016-07-29 11:23:52,908 - DEBUG [org.ldaptive.auth.Authenticator:236] - authenticate dn=helloworld at campus.csu.edu with request=[org.ldaptive.auth.AuthenticationRequest at 1303344754::user=helloworld, retAttrs=[passwordExpirationTime, loginGraceRemaining]]
2016-07-29 11:23:52,909 - DEBUG [org.ldaptive.auth.PooledBindAuthenticationHandler:67] - authenticate criteria=[org.ldaptive.auth.AuthenticationCriteria at 1387818266::dn=helloworld at campus.csu.edu, authenticationRequest=[org.ldaptive.auth.AuthenticationRequest at 1303344754::user=helloworld, retAttrs=[passwordExpirationTime, loginGraceRemaining]]]
...
2016-07-29 11:23:52,923 - DEBUG [org.ldaptive.provider.jndi.NamingExceptionUtils:358] - naming exception class javax.naming.InvalidNameException is ambiguous, maps to multiple result codes: [INVALID_DN_SYNTAX, NAMING_VIOLATION]
2016-07-29 11:23:52,928 - DEBUG [org.ldaptive.auth.Authenticator:381] - entry resolution failed for resolver=[org.ldaptive.auth.SearchEntryResolver at 1632642271::factory=null, baseDn=, userFilter=null, userFilterParameters=null, allowMultipleEntries=false, subtreeSearch=false, derefAliases=null, followReferrals=false, searchEntryHandlers=null]
org.ldaptive.LdapException: javax.naming.InvalidNameException: helloworld at campus.csu.edu: [LDAP: error code 34 - 0000208F: NameErr: DSID-03100200, problem 2006 (BAD_NAME), data 8350, best match of:
	'helloworld at campus.csu.edu'
]; remaining name 'helloworld at campus.csu.edu'
	at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:77)
Caused by: javax.naming.InvalidNameException: helloworld at campus.csu.edu: [LDAP: error code 34 - 0000208F: NameErr: DSID-03100200, problem 2006 (BAD_NAME), data 8350, best match of:
	'helloworld at campus.csu.edu'
]
	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3074)
2016-07-29 11:23:52,929 - INFO [org.ldaptive.auth.Authenticator:259] - Authentication succeeded for dn: helloworld at campus.csu.edu