PSARC 2009/328 nss_ldap should support AD-style groups

[Garrett D'Amore]

This case was approved a while back at PSARC ... I know we ran the 
litany on it (I think not for the first time) last week.  I've updated 
the IAM file.

    - Garrett