LDAP, allow only one security group to log

@ouvo Have you had a look at a ticket here?

Does this work for your use case?