For native mode (with domain nodes on the organization tree):
iplanet-am-static-group-dn: cn=mygroup, ou=groups, o=sesta.com
For compatibility mode (with domain nodes on the DC Tree):
iplanet-am-static-group-dn: cn=mygroup, ou=groups, dc=sesta, dc=com