script that translate ldap roles into ldap groups