There are many LDAP apps that can read all the groups once a connection is defined without requiring the full Distinguished name format for each group. Maybe a path to this would be to all the LDAP connection to be defined as a certain version of LDAP like Active Directory (AD) and then allowing all groups to be queried under one main folder.
