title: ldapsearch filter memberOf group returning no results
body: <p>I have ran into problem using <code>memberOf</code> filter in my ldapsearch query. The customer is using `OpenLDAP.</p>
  
  <p>I have a group of users with 3 members</p>
  
  <p><a href="https://i.stack.imgur.com/UYXM8.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/UYXM8.png" alt="Members of User Group X"></a></p>
  
  <p>When I query for users using ldapsearch: </p>
  
  <pre><code>ldapsearch -h hostname -p 393 -x -z 3 -b "o=XY,dc=group,dc=com,dc=xyz,dc=cz" "(&amp;(objectClass=person))" 1.1
  </code></pre>
  
  <p>I get results containing also user <code>XYZ</code>.</p>
  
  <pre><code># extended LDIF
  #
  # LDAPv3
  # base &lt;o=XYZ,dc=group,dc=com,dc=xyz,dc=cz&gt; with scope subtree
  # filter: (&amp;(objectClass=person))
  # requesting: 1.1 
  #
  
  # XYZ, People, XY, xyz.com
  dn: cn=XYZ,ou=People,o=XY,dc=group,dc=com,dc=xyz,dc=cz
  
  ...
  
  # search result
  search: 2
  result: 4 Size limit exceeded
  
  # numResponses: 4
  # numEntries: 3
  </code></pre>
  
  <p>But when I use the filter: </p>
  
  <pre><code>ldapsearch -h hostname -p 393 -x -z 3 -b "o=XY,dc=group,dc=com,dc=xyz,dc=cz" "(&amp;(objectClass=person)(memberOf=cn=X,ou=BusinessRoles,ou=AccessControl,o=XYZ,dc=group,dc=com,dc=xyz,dc=cz))" 
  </code></pre>
  
  <p>I get no results. </p>
  
  <p>Did I make any mistake in the query? Is the <code>memberOf</code> syntax OK?</p>