group database API

[Andrej Borsenkow]

> 
> ok, the default compile options will have:
> 
> - local group map
> - domain group map
> - username map
> 

is username map supposed to map DOMAIN\user to local user?