mod_shared_roster and mod_vcard_ldap integration?

Hi all,

So here's my scenario:

1 LDAP server (Users are in multiple groups because we use them for ssh logins and such)
1 Ejabberd server

Here's my problem(s)

If I use mod_shared_roster_ldap, users show up in multiple groups which is messy.
If I use mod_shared_roster with a little script to populate groups, then the users real name doesnt show in Pidgin, which is messy. I've seen people that say they've hacked mod_shared_roster to pull the real name out of the users vcard, but I think I'm too Erlang dumb to actually accomplish this myself?

Can someone help me?

Thanks