Applied the UA351V-Linux.tar.gz patch to overcome a problem with forgotten
password when login attribute is non-'cn'.

It appears our problem is not resolved, in some cases:

Using ldap traces, it seems that user app. sends an ldap query with a
filter like:
"(&(objectClass=inetOrgPerson)(ourLogonAttr=myUser Name*))"

Note the '*' appended to the user name (doesn't look right to me)...

When eDir returns more than one result, the forgotten password fails with
an error:
"Password Policy not found for entered user."

If I change the username value (on the 'problematic' object) to something
unique (so that only one result comes back from that query), it works ok.

Is that working as designed ?