diff --git a/gpas.go b/gpas.go
index 9567dbf..c394131 100644
--- a/gpas.go
+++ b/gpas.go
@@ -33,6 +33,7 @@ func passwordLost(user User, config *ConfigFile, ldapConn *ldap.Conn) error {
 	if user.OtherMailbox == "" {
 		searchFilter += "(carLicense=" + user.OtherMailbox + ")"
 	}
+	searchFilter += ")"
 	searchReq := ldap.NewSearchRequest(config.UserBaseDN, ldap.ScopeBaseObject, ldap.NeverDerefAliases, 0, 0, false, "(|()()())", []string{"cn", "uid", "mail", "carLicense"}, nil)
 	searchRes, err := ldapConn.Search(searchReq)
 	if err != nil {