problem with ldap group check in squid