Use base DN, not group DN to find group members