extended_ldapgroups