public LdapName getGroupLDAPBaseDN() throws GuacamoleException {
        return environment.getProperty(CASGuacamoleProperties.CAS_GROUP_LDAP_BASE_DN);
    }
Returns the base DN that all LDAP-formatted CAS groups must reside
beneath. Any groups that are not beneath this base DN should be ignored.
If no such base DN is provided, the tree structure of the ancestors of
LDAP-formatted CAS groups should not be considered.

@return
    The base DN that all LDAP-formatted CAS groups must reside beneath,
    or null if the tree structure of the ancestors of LDAP-formatted
    CAS groups should not be considered.

@throws GuacamoleException
    If the provided base DN is not a valid LDAP DN.
extensions/guacamole-auth-sso/modules/guacamole-auth-sso-cas/src/main/java/org/apache/guacamole/auth/cas/conf/ConfigurationService.java