That'd be nice. For open ldap you query a group's memberUid attribute. That gives you a list of uids. You then query the user's uid attribute. I wasn't confident that the attribute would consistently be called uid which is why I added the configuration variable.