Re: configuration for retrieving LDAP security group membership