By having a similar method to the one above (```valid_group?```) in ldap_fluff that is called generally but responds according to the specifics of the implementation. https://github.com/Katello/ldap_fluff/blob/master/lib/ldap_fluff/ad_member_service.rb#L67

If we know IPA responds to ```:member```, AD responds to ```:memberOf```, OpenLdap to ```:memberUid``` , I think we could test them all, then move it to ldap_fluff. I agree it's not ideal but it could work for most users due to the urgency of this PR. I'll search for more possiblities online tonight.