adding memberof/groups processing