Remove magic strings

Exposed LDAPgidattribute: this is the identifier that you want to use
such as cn or gid (in my case). So, a full dn for a group called admin
would be gid=admin,(LDAPbasegroupDN).