Is there any reason filters are not supported for search+bind LDAP authentication? There is no option to pass a filter in search+bind mode and "ldapsearchattribute" parameter is even checked to prevent filter injection. "ldapurl" parameter is defined as an RFC 4516 LDAP URL except filters and extensions are not supported despite being parsed.
AFAIK there is no reason other than that nobody has gotten around to write the code for it. I see no reason why we wouldn't accept a patch for that functionality.
