The module fails to parse something like

5:memberOf,=,cn=Somegroup,ou=Groups,dc=example,dc=com

if now hardcoded in simplesamlphp_auth.module to do
if ( !strncasecmp($roleruleevaluationdc[0],'memberof',8))
$roleruleevaluationdc = explode(',', $roleruleevaluation,3);

but that's a terrible hack. maybe comma isn't a good choice for separating fields? i
I can imagine it's a no a nice thing for people already using this module to change this, but then the parser needs some work :)