bugfix: User gets authenticated when satisfy is 'any' and no group

matches.

ngx_http_auth_ldap_module.c

@@ -1807,8 +1807,13 @@ ngx_http_auth_ldap_check_group(ngx_http_request_t *r, ngx_http_auth_ldap_ctx_t *
 
     /* Check next group */
     if (ctx->iteration >= ctx->server->require_group->nelts) {
+        /* No more groups */
+        if (ctx->server->satisfy_all == 0) {
+            return NGX_DECLINED;
+        } else {
             return NGX_OK;
         }
+    }
 
     if (!ngx_http_auth_ldap_get_connection(ctx)) {
         return NGX_AGAIN;