Question to meta-backend / ldap-backend

Hi,

I think this is a relative simple question but I did not use the meta/ldap-backend before.

We have an openldap-server for user authentification. The user bind as

uid=<user>,ou=Benutzer,dc=kmux,dc=de

where <user> is the actual username.

We have a diffent application where only users of a special posixGroup "Archiv" should be valid. The application is not capable of doing some sort of filtering.

So, I thought it must be passoble to do this filtering with the meta or ldap-backup using the original ldap-db:

the filter should look like:

(&(cn=Archiv)(memberUid=<user>)(objectClass=posixGroup))

where <user> is the username as above.

Any hints?