diff --git a/lib/Auth/LDAP.php b/lib/Auth/LDAP.php
--- a/lib/Auth/LDAP.php
+++ b/lib/Auth/LDAP.php
@@ -396,6 +396,11 @@
             return false;
         }
 
+        // remove invalid/hidden attributes
+        if (isset($attributes['domainrelatedobject_only'])) {
+            unset($attributes['domainrelatedobject_only']);
+        }
+
         $domain_dn = key($domain);
 
         // We should start throwing stuff over the fence here.