diff --git a/openbis/dist/server/service.properties b/openbis/dist/server/service.properties
index 390a220d6683bace2c75860c1e5ead0d389f08c8..4e3651da47f6e80a3ffb277cc501d668b5744857 100644
--- a/openbis/dist/server/service.properties
+++ b/openbis/dist/server/service.properties
@@ -67,7 +67,7 @@ ldap.queryEmailForAliases = true
 # ldap.queryTemplate = (&(objectClass=organizationalPerson)(objectCategory=person)(objectClass=user)(%s))
 # which is known to work for many Active Directory installations.
 # For OpenLDAP, replace by: 
-# ldap.queryTemplate = (&(objectClass=organizationalPerson)(objectClass=user)(%s))
+# ldap.queryTemplate = (&(%s))
 # For restriction to BSSE accounts in OpenLDAP, set to: 
 # ldap.queryTemplate = (&(objectClass=bssePosixAccount)(%s))
 ldap.queryTemplate =