diff --git a/tmpl/nineschool-env.local b/tmpl/nineschool-env.local
index ce2e6fb..6c1c441 100644
--- a/tmpl/nineschool-env.local
+++ b/tmpl/nineschool-env.local
@@ -76,8 +76,8 @@ LDAP_USERNAME=uid
 LDAP_FIRSTNAME=givenname
 LDAP_LASTNAME=sn
 LDAP_EMAIL=mail
-LDAP_FILTERGROUP=(&(ObjectClass=posixGroup)(cn=*))
-LDAP_FILTERUSER=(&(ObjectClass=person)(uid=*))
+LDAP_FILTERGROUP='(&(ObjectClass=posixGroup)(cn=*))'
+LDAP_FILTERUSER='(&(ObjectClass=person)(uid=*))'
 %else
 LDAP_USERNAME=%%nineschool_ldapuid
 LDAP_FIRSTNAME=%%nineschool_ldapfirstname