OK, so I was testing the Helpdesk module and left the User Search query blank, which according to the docs, says that SSPR will then construct the LDAP query based on the (in my case, the DEFAULT) search items like:
cn, last name, first name, etc.

Comes back with no results found.

I fired up LDAP trade via iMonitor. (back end is OES11 SP2, and I Think eDir 8.8.8.something)

Anyway, this is what it looks like it's doing:

Code:
09:24:02 6E317700 LDAP: (09:24:02 6E317700 LDAP: (134.179.106.109:45036)(0x0005:0x63) Search request:
   base: "ou=CO,o=abc"
   scope:2 dereference:0 sizelimit:501 timelimit:31 attrsonly:0
   filter: "(&(objectClass=inetOrgPerson)(|(cn=*kjhurni*)(givenName=*kjhurni*)(sn=*kjhurni*)(mail=*kjhurni*)(workforceID=*kjhurni*)))"
   attribute: "mail"
   attribute: "givenName"
   attribute: "cn"
   attribute: "sn"
   attribute: "workforceID".106.109:45036)(0x0005:0x63) Search request:
   base: "ou=CO,o=abc"
   scope:2 dereference:0 sizelimit:501 timelimit:31 attrsonly:0
   filter: "(&(objectClass=inetOrgPerson)(|(cn=*kjhurni*)(givenName=*kjhurni*)(sn=*kjhurni*)(mail=*kjhurni*)(workforceID=*kjhurni*)))"
   attribute: "mail"
   attribute: "givenName"
   attribute: "cn"
   attribute: "sn"
   attribute: "workforceID"
09:24:02 6E317700 LDAP: (192.168.106.109:45036)(0x0005:0x63) nds_back_search: Search Control OID 1.2.840.113556.1.4.319
09:24:02 6E317700 LDAP: (192.168.106.109:45036)(0x0005:0x63) nds_back_search: Search Control OID 2.16.840.1.113730.3.4.2
09:24:02 6E317700 LDAP: iterCountEntries: ispositionable returned FALSE
09:24:02 6E317700 LDAP: (192.168.106.109:45036)(0x0005:0x63) SearchWithControls: iterator copy request failed with -714
09:24:02 6E317700 LDAP: (192.168.106.109:45036)(0x0005:0x63) nds_back_search: Failure of non-critical control ignored, err = not implemented (-714)
09:24:02 6E317700 LDAP: (192.168.106.109:45036)(0x0005:0x63) Sending operation result 0:"":"" to connection 0x109fa380
09:24:02 7124D700 LDAP: (192.168.106.109:45036)(0x0006:0x63) DoSearch on connection 0x109fa380
09:24:02 7124D700 LDAP: (192.168.106.109:45036)(0x0006:0x63) Search request:
Any ideas? Or should I ask this over in the eDir forum?