nss_ldap should support AD-style groups [PSARC/2009/328 FastTrack timeout 06/10/2009]

[Gary Winiger]

> So +1 from me.  Hopefully Gary is also reviewing this and making sure 
> that neither Nico nor I are missing anything.

+1

Gary..