diff --git a/war/src/main/webapp/WEB-INF/security/LDAPBindSecurityRealm.groovy b/war/src/main/webapp/WEB-INF/security/LDAPBindSecurityRealm.groovy
index 4f0995cb53faf3a767a55a01173a170527b6dd90..3bd5001ef2fc1420e7fab493cdf3ea560332fd03 100644
--- a/war/src/main/webapp/WEB-INF/security/LDAPBindSecurityRealm.groovy
+++ b/war/src/main/webapp/WEB-INF/security/LDAPBindSecurityRealm.groovy
@@ -64,7 +64,7 @@ bindAuthenticator(BindAuthenticator2,initialDirContextFactory) {
 authoritiesPopulator(AuthoritiesPopulatorImpl, initialDirContextFactory, instance.groupSearchBase) {
     // see DefaultLdapAuthoritiesPopulator for other possible configurations
     searchSubtree = true;
-    groupSearchFilter = "(| (member={0}) (uniqueMember={0}) (memberUid={1}))";
+    groupSearchFilter = "(| (member={0}) (uniqueMember={0}) (memberUid={0}))";
 }
 
 authenticationManager(ProviderManager) {