Getting a custom attribute from Authentik LDAP

[sskokorin]

Hi! I want to get a custom attribute that I created in Authentik using ldapsearch.
In my case, I created a custom attribute called "corporate_mail" whose value is "user@example.com" (for example).
When I use an ldapsearch query like:

ldapsearch -x -H ldap://authentik.example.com -D 'cn=ldapservice,ou=users,DC=ldap,DC=goauthentik,DC=io' -b 'DC=ldap,DC=goauthentik,DC=io' '(&(objectClass=posixAccount)(&(memberOf=cn=mail,ou=groups,dc=ldap,dc=goauthentik,dc=io)(corporate_mail=user@example.com)))' -W

I get the response:

# extended LDIF
#
# LDAPv3
# base <DC=ldap,DC=goauthentik,DC=io> with scope subtree
# filter: (&(objectClass=posixAccount)(&(memberOf=cn=mail,ou=groups,dc=ldap,dc=goauthentik,dc=io)(corporate_mail=user@example.com)))
# requesting: ALL
#

ldap_search_ext: Bad search filter (-7)

I understand that you can't just get the value of a custom attribute.

How do I modify the Authentik or attribute or query to succeed?