[389-users] Re: determining dynamic group membership