dn: ou=groups,{{ LDAP_BASE_DN }} changetype: add objectClass: organizationalUnit objectClass: top ou: groups