diff --git a/war/resources/WEB-INF/security/LDAPBindSecurityRealm.groovy b/war/resources/WEB-INF/security/LDAPBindSecurityRealm.groovy
index 9cdefc3..2f77800 100644
--- a/war/resources/WEB-INF/security/LDAPBindSecurityRealm.groovy
+++ b/war/resources/WEB-INF/security/LDAPBindSecurityRealm.groovy
@@ -64,6 +64,7 @@ bindAuthenticator(BindAuthenticator2,initialDirContextFactory) {
 authoritiesPopulator(AuthoritiesPopulatorImpl, initialDirContextFactory, Util.fixNull(instance.groupSearchBase)) {
     // see DefaultLdapAuthoritiesPopulator for other possible configurations
     searchSubtree = true;
+    groupSearchFilter = "(| (member={0}) (uniqueMember={0}) (memberUid={1}))";
 }
 
 authenticationManager(ProviderManager) {
@@ -82,4 +83,4 @@ authenticationManager(ProviderManager) {
             key = "anonymous"
         }
     ]
-}
\ No newline at end of file
+}