select * from /matrix/ldap ldap, group where group.username=ldap.username /** output() **/ ;