Get gidNumber from existing posixAccount, like loginShell. Simplify LDAP by not maintaining posixGroup.