Adding option to disable RequireGroup.
Break out BaseDN for both user and group matching.