add ability to define ldap_group_member