openLDAP & memberof