I have tried quite a few variations of the squid_ldap_group eg: root@control:/usr/lib/squid# ./squid_ldap_group -b "ou=groups,dc=example,dc=com" -f "(&(cn=%v)(member=%u)(objectClass=group))" -B "ou=people,dc=example,dc=com" testuser testgroup ERR May 29 10:00:11 control slapd[5925]: hdb_search: no candidates May 29 10:00:11 control slapd[5925]: send_ldap_result: conn=114 op=0 p=3 May 29 10:00:11 control slapd[5925]: send_ldap_result: err=0 matched="" text="value does not conform to assertion syntax" May 29 10:00:11 control slapd[5925]: send_ldap_response: msgid=1 tag=101 err=0 May 29 10:00:11 control slapd[5925]: conn=114 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=value does not conform to assertion syntax But cannot get this to run from the command line. Can someone help me with the syntax?