Good day, hope to be not OT. I have to get members of a group in AD, so here is what I do and what I get: ldapsearch -x -D &quot;pippo(a)dominio.com <mailto:pippo@dominio.com>" -w pippopw "cn=groupname" member:: W049X1MgVmlhPPAaXTDoCxPVT1fQSBNYW51dGOOOemlvbmUgZSBHZXN0aW9uZSBQYX= Rya W1vbmlvLERDPXByb3ZpbmNpYSxEQz12cixEQz1pdA=3D=3D member: CN=_SubGroup2,OU=_SubGroupArea,DC=dominio,DC=com If I do a search whith phpldapadmin I get both name (_SubGroup1 and _SubGroup2), so I guess the problem is how ldapsearch handles the output from AD server or in config file, but can't find a solution.