bug 855384 - Use native LDAP lookup to look up group membership, r=adrian