title: Specify both AND and OR conditions in ldap_access_filter
body: <p>How do i add filter with both AND and OR condition in ldap_access_filter?</p>
  
  <p>I have my ldap search filter as below with multiple groups. I now want to add one more condition where users need to be part of a primary group and then part of any mentioned groups in the filter. I have tried options in <a href="https://www.freeipa.org/images/c/cc/FreeIPA33-sssd-access-control.pdf" rel="nofollow noreferrer">https://www.freeipa.org/images/c/cc/FreeIPA33-sssd-access-control.pdf</a> but it didn't work.</p>
  
  <pre><code>ldap_access_filter = (|(memberOf=cn=DATA,ou=HADOOP,ou=APPLICATION_GROUPS,ou="ACCESS GROUPS",ou=GROUPS,dc=COMPANY,dc=CORP)......)
  </code></pre>