APM LDAP Query Failure - not using fallback

I running an LDAP query in a policy that is performing   return [mcget {session.ldap.last.attr.userPrincipalName}]   I know this is working for known UPNs, but I'm not catching the exceptions ...