vCenter 5.1 SSO can see users but not groups

I have finally managed to upgrade to 5.1 and gotten SSO to talk to our LDAP server but I am not getting any groups back only users. We have a samba implementation using LDAP for the backend and since SSO returns nothing when we attempt to use it with the Active Directory setting we are using OpenLDAP which works fine but only returns users and we don't get any groups. Any ideas? Here's what ldapsearch shows for one of our groups with names changed to protect the guilty