Re: group membership on LDAP/AD servers