I have this base search on nslcd.conf:base o=xxx,dc=xxxxx,dc=xxand everything works fine.But I have a problem, I have a web admin page on this server and the list of getent passwd is too long (about 9k of user). So the web interface goes in timeout.For bypassing that I want to limit the search at only one group called grayusersso I create on ldap server the group, I put my users and I add on nslcd.conf this for group filter:base group cn=grayuser,ou=samba,ou=groups,o=xxx,dc=xxxxx,dc=xxand the getent group show only my grayuser group :)But when I do getent passwd I have all user (not only the grayuser group)so I tried:base passwd cn=grayuser,ou=samba,ou=groups,o=xxx,dc=xxxxx,dc=xxbase shadow cn=grayuser,ou=samba,ou=groups,o=xxx,dc=xxxxx,dc=xxbut I don't see any user with getent passwd 
Ldap group filter - nslcd
linux;ldap