LDAP user secondary lookup query is not formatted correctly.
The LDAP secondary user lookup query string is incorrect; the substitution value * is not present.
An example of the user-secondary-lookup option is (&(objectclass=posixAccount)(sn=*)) uid. In this example the entered user name is substituted for the * and the result of the query is found in the uid field.
