Ensure migrate_ldap works properly with groups.

Change-Id: I0ebf25d910df8b025a1e4d91b2f771d7d41701ef