Thread:Extension talk:LDAP Authentication/authenticate against dynamic group/reply

The way that groups work in the plugin likely means that this will not work with dynamic groups. There are two ways to do group searching: start with the group, and work your way up and down nested groups, or search for user groups, and work your way up the groups; I do the latter. It's slightly more efficient, but also means you'll get issues like this.

Maybe I'll add support for both search methods. I don't have much time to add features to this extension any more, so if you send a patch for the alternative search method, I'll accept it.