should this be ```<group_dn>```?