single entry for a group with no container RDN