changes in the groups selection in LDAP