ldap_group_filter

Optional LDAP search filter for finding a group with a given group name. Use %s as the placeholder for the group name in the filter.

ldap_group_filter = filter

The full LDAP search grammar is specified in RFC 2254 and RFC 2251.

If unspecified, then a default search filter is generated based on the group object class and group attribute.

For example:

ldap_group_filter = "(|(&(cn=%s)(objectClass=groupofUniqueNames))(&(cn=%s)
(objectClass=groupOfURLs)))"