Thanks Kurt - you are, of course, correct. My mistake there. However, should ldapsearch not be removing that escaping when displaying such strings to the user? If I create a user group named 'Group,X' I would expect that ldapsearch should display it to me as that, not as 'Group\2CX'.