param: rename szLdapGroupSuffix -> _ldap_group_suffix