The Johan
In theory, as long as you can craft a query that selects the right objects to search through, it should be possible, yeah.
You may also want to consider contact the support ticket system and asking for the LDAP post_auth script that allows you to just search the whole LDAP directory, and based on group membership, either allow a user in, or not. This avoids the trouble of making a complicated LDAP query, especially if you want to use a couple of different groups, each with their own access rules.
