Filter for NSS_LDAP

[Jean-Rene Cormier <jean-rene.cormier@cipanb.ca>]

Hi, I am using NSS_LDAP to share a user database on all my servers and I
was wondering if there's a way I could make a filter for secondary
groups. ie: I have this user that has a primary group of 'users' and is
also in group 'web'. So in LDAP it looks like this.

dn: uid=user,ou=People,dc=domain,dc=com
uid: user
gidNumber: 100
....

dn: cn=users,ou=Group,dc=domain,dc=com
cn: users
gidNumber: 100
...

dn: cn=web,ou=Group,dc=domain,dc=com
cn: web
gidNumber: 101
memberUid: user
....


Is there a way I can make a filter so that it would only allow users in
group 'web'? For primary group I could use (gidNumber=100) but I have no
idea how to do it for secondary groups.

Thanks

Jean-Rene Cormier