Ldap auth #14

without nested groups search