How to make GitLab web interface authorization work correctly?

Question

git

Installed GitLab (with LDAP authorization), everything works fine.
Set filter
user_filter: '(&(|(objectclass=posixAccount))(|(memberOf=cn=git,ou=groups,dc=terrasystems,dc=eu)))'
git client works via http (login/password). If the filter matches reality and authorization was successful, then push works fine, and if the filter does not really match, then we get Access Denied - which was required to be proven.
But the LDAP authorization of the web muzzle in any case allows the user to log in, as if it does not take into account the specified filter.
How to be? How can I make the user's authorization in the web interface of the subject, in addition to checking the login / password, be performed taking into account the filter?