Description of problem:
Starting with a configured DS server containing a group ou of ou=Groups,dc=bos,dc=redhat,dc=com, When you add a new group to that ou, I expect that the group will get migrated along with the other groups in that ou. 
migrate-ds seems to only migrate some of the groups.

Version-Release number of selected component (if applicable):
ipa-server-2.0.0-23.el6.x86_64

How reproducible:
always

Steps to Reproduce:
1. create ds setup containing the group ou of ou=Groups,dc=bos,dc=redhat,dc=com
2. add the user specified in the attached user-to-add.ldif
3. run "ipa migrate-ds" to migrate from that server. 
4. search for that user in the new IPA

Actual results:
[root@ipaqa64vmb ds-migration]# ipa group-find group1000
----------------
0 groups matched
----------------
----------------------------
Number of entries returned 0
----------------------------


Expected results:


Additional info:
Error logs look good during the migration, my speculation is that the ldap query isn't picking up all of the groups to migrate.