Usergroups LDAP retrieval gets users from 'sub' user groups