This is plain wrong. Theunivention-ldapsearchcommand, as stated above, should contact the OpenLDAP server instead of the Samba 4 LDAP server. Therefore the syntaxcn=administratorshould not work butuid=…should. I can think of two possible reasons why this happens: univention-ldapsearchdoes...