[SSSD-users] ldap_group_search_base filtering

Hello, I am migrating from pam_ldap to sssd and previously in my ldap.conf I was able to use this to filter out groups based on the "host" attribute using the nss_base_group feature: nss_base_group ou=Groups,dc=some,dc=company,dc=com?one?|(host=\2A)(host=somehost.test.com)(host=test) I am trying to do the same thing in SSSD and can't figure it out, I have added everything past the first ? above to my ldap_group_search_base stanza but it doesn't work as expected, is it a syntax thing or is there a different way of doing this (or am I out of luck?)? Thanks in advance! -DBright