RE: LDAP groups