ldap group name resolving problem