Fix typo
Make dynamic comparisons work again

for LDAP-Group == ...
etc.