java ad 域 ldap怎么获取用户组

java ad域 ldap objectclass=organizationalUnit和objectclass=group 有啥区别