pattern search results for ldap\_user\_canceled