LDAP posix groups support

Adding support for LDAP posix groups, where groups know their members,
and users don't know which groups they are member of.