Group members in role mapping - Active Directory

Hi all! I'm having somo difficulties to get users and groups associations in AD. I can authenticate, but everyone gets assigned to all groups mapped. I suspect of groupSearchFilter property in ldapAuthenticationProvider bean. For now the only value that ever worked is:

<property name="groupSearchFilter" value="(objectClass=group)"/>

Tried:

(&((objectClass=group)(member:1.2.840.113556.1.4.1941:={0})(cn=*)))
(&(uniqueMember={0})(objectclass=groupofuniquenames))

(&(objectclass=group)(member={0})(cn=*))

(&((objectClass=group)&(member:1.2.840.113556.1.4.1941:={0})(cn=*)))

None of them worked. What should I put to get user memberships to roles?