A server is authenticating users using the pam_ldap module. Only users who are members of a certain group should be allowed to login. In which parameter in ldap.conf can a filter string be specified, that is ANDed with the login attribute when validating a user? (Enter only the parameter, without any options or values)

{} [+]