rhino tractor manual
ldap query to list groups a user is a member of