For advanced applications, you can specify a search filter
that Radiator will use to find which user groups a user belongs to by
using the optional GroupSearchFilter parameter. It allows you to use
arbitrarily complicated LDAP search filters to find the names of user
groups the user belongs to. Special formatting characters are permitted,
and %0 is replaced by UsernameAttr and %1 by the user name.