fixing ldap group issues