I went through the issue and the addon design here is the analysis for the attribute validation flow. Below is the workflow of the ldapsearch command: The command fetches the valid available attributes from the schema of the specified domain (value of domain option). Then it validates the provided attribute list (value of attrs option) with the list fetched from the server schema. Below is the workflow of the ldapfilter command: The command fetches the valid available attributes from the schema of the server which is configured as default domain. Then it validates the provided attribute list (value of attrs option) with the list fetched from the server schema. So, there is a difference in the attribute validation of both the command as ldapfilter always uses the schema of the default domain for the attribute validation, while ldapsearver uses the schema of the server which is provided as a domain option. This behavior is by design. The behavior I mentioned is also mentioned in the Addon Doc with the workaround: doc link Using of attr='*' is not supported in the ldapfilter. It will only work for ldapsearch. Thanks,
... View more