Getting Groups from Strange LDAP Configuration

Our LDAP server does not report a nice group to use with the DN. Instead, there is an attribute "businessClass" that shows up as

businessClass: Gopher or
businessClass: Wizard or

perhaps businessClass is not set.

I would like to map Gophers to my drupal role Geniuses and Wizards to Dunces. But nothing seems to work.

This sounds to me like Groups are specified by LDAP attributes: Here I try to enter businessClass as the attribute. Then I modify ldapgroups.conf.php so that

ldap_group_role_mappings = array( 'Wizards' => 'Dunces', 'Gophers' => 'Geniuses' );

This does not work.

So then I tried using option 3: Groups exist as LDAP entries where a multivalued attribute contains the members' CNs, in spite of not knowing what a CN means in this context or why you would use common name for anything. I also don't know what "Nodes" containing groups means. I tried putting businessClass in "Nodes" without success. I tried putting it in "Attribute holding group members", both without luck.

What is the answer?