updated ldap group search string