ldap_group_scope

Specifies how deeply under the base DN to search for groups.

ldap_group_scope = onelevel | subtree

You can specify onelevel and subtree for this parameter. onelevel specifies to search only one level below the DN, subtree specifies to search all sub-trees.

For example:

ldap_group_scope = subtree