Working LDAP implementation, with option to verify group membership