Penn is not a big LDAP shop, we have a person database, so we decided to have a feed from there to the Grouper DB into a subject table. The JDBC2 subject source provides more powerful querying (and we contributed it!) so we are using that. Here is a row from our table
sfd