Implementation of a script (run either ad-hoc or by cron) to sync groups membership
Consistently use $group->ldap_dn as a filter rather than sometimes as a Base DN