Don't hardcode CN=Users in provisioning code

Start the search at domaindn
get_user_attrs: New function returning all attributes of a user
needed for upcoming work (multidomain)
Use the UPN as the mail address of the new user

Instead of using user@dnsdomain, which will be wrong in a multidomain setup.