So to be clear - when you use double backslash coma in ldapsearch you get correct result but this still doesn't work in portal config? It may be a bug but I think that the usage of filter is as simple as passing it to the JNDI API. Could you try enabling DEBUG logging for package 'org.jboss.portal.identity.ldap' or 'org.jboss.portal.identity'. It should be verbose on the filter/context during user search. If you are sure it fails, please create a JIRA issue and assign it to me. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4064868#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...