how to manage groups in different machines using LDAP