Use base DN, not group DN to find users