I've tried with symbol "|" - same result.
This symbol just adds OR condition to 1 argument, so it does not make sense to put.
the main group "jabber_access" should be a domain local group to allow for nested groups.
2) Changing my group type to domain local (not helped again)
And nested groups works perfectly with global group.
My problem with only a users, that doesn't have spaces in CN and disabled.
My filters, your filters - all looks good, when i test it in ADUC (same results).
Seems to be a little bug in openfire code 