Password recovery: User not found

[preycor]

I'm busy testing password recovery and have just found an issue which is a bit of a show stopper. I'm hoping that someone can assist me with finding a solution without having to re-develop the whole IDV.

When testing the password recovery I'm asked for the User Name. I enter this as "Consultant2T". This is one of the two CN's for an object named "IDV0000002" - the other CN is "Consultant2T".

I see the following LDAP queries on the DSTrace console:

14:51:17 9D1F1BA0 LDAP: DoSearch on connection 0x16a5c000
14:51:17 9D1F1BA0 LDAP: Search request:
base: "o=vault"
scope:2 dereference:0 sizelimit:0 timelimit:0 attrsonly:0
filter: "(&(objectClass=inetOrgPerson)(cn=consultant2t *))"
attribute: "srvprvUUID"
14:51:17 9D1F1BA0 LDAP: Sending search result entry "cn=IDV0000002,ou=people,o=vault" to connection 0x16a5c000
14:51:17 9D1F1BA0 LDAP: Sending operation result 0:"":"" to connection 0x16a5c000
14:51:17 9C9DABA0 LDAP: DoSearch on connection 0x16a5c280
14:51:17 9C9DABA0 LDAP: Search request:
base: "cn=IDV0000002,ou=people,o=vault"
scope:0 dereference:0 sizelimit:0 timelimit:0 attrsonly:0
filter: "(objectClass=*)"
attribute: "cn"
14:51:17 9C9DABA0 LDAP: Sending search result entry "cn=IDV0000002,ou=people,o=vault" to connection 0x16a5c280
14:51:17 9C9DABA0 LDAP: Sending operation result 0:"":"" to connection 0x16a5c280

It's definitely finding and returning the right object, as you can see - however the interface for Password Recovery responds with the error "User not found".

Does anyone know what's going on in the background and whether there's a way to make it work as I'm expecting it to? (in other words, match the user based on one of the two CN's, then allow the recovery process to continue)