Re: prevent ldap from searching for groups