s3: change ldap filter to what really was intended (cherry picked from commit 9b75650...

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Part of a fix for bug #7116.

diff --git a/source3/passdb/pdb_ldap.c b/source3/passdb/pdb_ldap.c
index ad60228f76944d5d26e776784f0c1ec8db8c5bf1..ab041feba0f6bc15319c36bb1ce5d390d7c52aef 100644 (file)
--- a/source3/passdb/pdb_ldap.c
+++ b/source3/passdb/pdb_ldap.c
@@ -3833,7 +3833,7 @@ static NTSTATUS ldapsam_alias_memberships(struct pdb_methods *methods,
        }
 
        filter = talloc_asprintf(mem_ctx,
-                                "(&(|(objectclass=%s)(sambaGroupType=%d))(|",
+                                "(&(objectclass=%s)(sambaGroupType=%d)(|",
                                 LDAP_OBJ_GROUPMAP, type);
 
        for (i=0; i<num_members; i++)