The Search Constraints (defined on the LDAP Connection setting screen) and Login Attributes (defined on the Authentication Configuration setting screen) use the LDAP search filter syntax (RFC2254).
The following more advanced example authenticates members of the ActiveDirectory group j5-Users:
memberOf=CN=j5-Users\,dc=brietree\,dc=sjsoft\,dc=com,dc=brietree,dc=sjsoft,dc=com
You can use backslashes to escape commas, or you can use double quotes around the
attribute (memberOf="CN=j5-Users,DC=brietree,DC=sjsoft,DC=com"), but single quotes
don't work.