Assigning Groups to LDAP users