https://bugs.openldap.org/show_bug.cgi?id=9779
--- Comment #2 from mail@andrejro.de --- I just tested with the patch in ITS#9747. Weirdly enough negation only works on Groups with only one static member. Other matches in conjunction with AND and OR work fine. As soon as I add another member the filter (!(memberOf=cn=test,ou=Group,dc=eample,dc=com) returns nothing instead of all users excluding two who are in this group.