LDAP group validation for IPsec logins fails

[Ingo Freund]

Hi,

it is not the first time for me to configure LDAP group controlled IPsec logins.
All is set up following the manual, but with the activated "Extended Query" logins fail.
Without the activated "Extended Query" logins are authenticated.

The difference for me is only in version 2.1.2 where it is working, but not in 2.1.3

How can I debug this problem?

Thank you for help.