If you are using Sun Java System Directory Proxy Server, a null attribute LDAP search returns an error. For example:
# ldapsearch -b base-dn uid=user ""
If Access Manager points directly to the LDAP director server, the same search is successful.
Workaround: If you are using Directory Proxy Server, either enable null attribute searches or supply an attribute name for the search.