<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Nov 26, 2014, at 15:04, Daniel Pryor <<a href="mailto:dpryor@parchment.com" class="">dpryor@parchment.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">We are using port 3268 and the ldaploginmodule. We have not tried another user, because the same user was able to query it via ldapsearch and ldifde. Do you suggest we still try using another more privileged user?</span></div></div></div></blockquote><div><br class=""></div>I was concerned about the reverse, that the Shibb account might have less privileges than the account you used to verify the presence of the attribute value.</div><div><br class=""></div><br class=""></body></html>