enhancements required by EGroupware:
- support for utf-8 (and others supported by mbstring) internal encoding
- Win2008r2/Samba4 CN=Users container can now be specified
- Win2008r2 required creation order for users: 1. deactivated, 2. password added, 3. activated
- Win2008r2 password reset requires ldap_mod_replace
remove accidently commited diff