openfire + ldap - user search restriction doesn't work (updated topic)

Hey guys,

installed the latest openfire by rpm, using embedded database and I did the setup to configurate openfire. Now what I need to do:

I got an AD with the Following structure:

• Users
  • Test1
    • User001
    • ...
    • User010
  • Test2
    • User011
    • ...
    • User020

Now I wan't that openfire is creating groups Test1 and Test2 and user only see all other users of his OU ...

So User001 - 010 should be able to see themselfs but noone of them should see any user of Test2 ... same the other way around.

My problem is: I said only search users in their group on the server, and doesn't matter if I enable or disable searching users for clients, they are always able to search for users not in their group.

My config is basedn = OU=Users,DC=DOMAIN,DC=de and all other configurations are default. Ofc I entered a LDAP user - otherway this couldn't work Image may be NSFW.
Clik here to view.