Open Source Document Management System | OpenKM

I have create groups in my AD, all groups looks like
ROLE_XXX
ROLE_RH
ROLE_INVOICE
....
ROLE_USER
ROLE_ADMIN

my standard "principal.ldap.user.search.filter" works fine for ROLE_USER & ROLE_ADMIN
(&(objectclass=user)(|(memberOf=CN=ROLE_ADMIN,OU=CKBC,OU=Domain Controllers,DC=test,DC=org)(memberOf=CN=ROLE_USER,OU=CKBC,OU=Domain Controllers,DC=test,DC=org)))

I have lot of group
I try to modify the LDAP request like : ....memberOf=CN=ROLE_*.... this doesn't work
I try to modify the LDAP request like : ....memberOf=CN=ROLE_ALL .... where ROLE_ALL incule all group I wan to have, this doesn't work

Do I have to had all group manually in the principal.ldap.user.search.filter?

No necessary, because all users to login at least must have one of this two roles, if they do not have one of these roles will not be able to login. Simply filter for it is enought