Thread:Extension talk:LDAP Authentication/Group Search in Active Directory not using full DN/Ryan lane

Have you tried setting $wgLDAPGroupUseFullDN? See the group options for a description of the option.