groupmembership_filter for LDAP module

[Alexei Monastyrnyi]

Hi List.

I am trying to enable group filter to allow only certain LDAP users to 
be able to login to my VPN hub.

I run FreeRADIUS 1.0.2 on SPARC Solaris 9

All users are in group
cn=vpnusers,ou=group,dc=mydomain,dc=com
listed as "memberUid"s

In radiusd.conf I have the following

filter = 
"(&(objectClass=posixAccount)(uid=%{Stripped-User-Name:-%{User-Name}}))"

groupmembership_filter = 
(&(&(cn=vpnusers)(objectClass=posixGroup))(memberUid=%{Stripped-User-Name:-%{User-Name}}))

groupmembership_attribute = "vpnusers"

It doesn't seem to work, no sign of searching for "vpnusers" in LDAP 
server logs and users that are not in this group are still able to log in.

I may be missing something... Hints of where to look would be highly 
appreciated.

Cheers,
A.