There are two common ways of representing group membership in LDAP.
                
                    - 
                        User entries can hold membership information as attribute.
 To use this simply specify the name of the attribute that holds
 the group information.
- 
                        Group entries can hold a list of their members as attribute.
 You can specify a search context and filter to find all groups
 that the user should be considered a member of. Typically this
 involves filtering groups by looking for the user's DN on a
 group attribute.