When I added LDAP support I assumed that an email_addr without a "@" is an LDAP name. I forgot that WCG uses user names rather than email addrs. D'oh!