Just created this issue using the ‘@’ as well. I only needed a single command to clear the issue:
ldapdelete -x -D "cn=admin,$(ucr get ldap/base)" -y /etc/ldap.secret \ "relativeDomainName=@,zoneName=domain.org,cn=dns,dc=domain,dc=org"
Discovered the cli via UCS 5 Upgrade Fail
@ryan.mcgee Thanks for your post and solution!!! It was going to be a long night otherwise.