apparently ldap doesnt always return an array of groups