so I did this: ldapsearch -H ldaps://ds1.domain.com -D "cn=directory manager" -w "pass" -b "uid=test2015,ou=USERS,dc=domain,dc=com and it gave me the expected results. All of the attributes for the uid=test2015 -- 389-users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx