Thread:Extension talk:LDAP Authentication/Trouble configuring group membership check/reply (2)

I don't think I've ever seen groups done this way in LDAP. I'm really confused as to what you are trying to do.

Is the group an attribute of the user, or is it a separate entry that the user is a member of? The latter is usually the case, but you are trying to do the former.