changed ldap group detection (recursive for AD ldap)
example update