When I add this to the attributes field of the LDAP Server, all I get is dn and distinguishedName when I browse.  Without those 2 fields in the attributes field, I get everything I've been getting.  I use this LDAP Server for User imports also and without anything in the attributes field, we're getting what we need.  Do I need to setup a separate LDAP Server for Users and Groups?