LDAP: add info that primary groups are not read