get ldap user group membership