ldap_group_base_dn

Base distinguished name (DN) of the LDAP tree that contains groups. 

ldap_group_base_dn = DN

For example: 

ldap_group_base_dn = "ou=Groups,dc=Corp"