make jenkins ldap group configurable