BACKLOG-5397 : added configuration parameter : can set that ldap groups contain or do not contain sub groups