s3: change ldap filter to what really was intended

diff --git a/source3/passdb/pdb_ldap.c b/source3/passdb/pdb_ldap.c
index acebd978d0ce3843b3434b6cdbca28ae191676a1..d079262ee8c6465e5544d2d8a27741296f08d95d 100644 (file)
--- a/source3/passdb/pdb_ldap.c
+++ b/source3/passdb/pdb_ldap.c
@@ -3833,7 +3833,7 @@ static NTSTATUS ldapsam_alias_memberships(struct pdb_methods *methods,
        }
 
        filter = talloc_asprintf(mem_ctx,
-                                "(&(|(objectclass=%s)(sambaGroupType=%d))(|",
+                                "(&(objectclass=%s)(sambaGroupType=%d)(|",
                                 LDAP_OBJ_GROUPMAP, type);
 
        for (i=0; i<num_members; i++)