I'm having trouble getting group membership to work against Samba4 (Active Directory).  It doesn't appear to be running the search (&(objectClass=group)(member=%{control:Ldap-UserDn})).

I've googled and found others with the same issue, but I don't see the same configuration mistakes that they had made.

modules/ldap
users
debug output
-- 
Arthur Ramsey
Systems Administrator
Mediture
arthur_ramsey@mediture.com
952.400.0323

This e-mail and any attachments may contain CONFIDENTIAL information, including PROTECTED HEALTH INFORMATION. If you are not the intended recipient, any use or disclosure of this information is STRICTLY PROHIBITED; you are requested to delete this e-mail and any attachments, notify the sender immediately, and notify the Mediture Privacy Officer at privacyofficer@mediture.com.