Add nestedGroups option to ldap
Merge branch 'ldap' into qa