ldapsearch, searching group members