fixes bug 848450 - mapping 1-n ldap groups, r=Pike