Add support for non-TLS-enabled LDAP server

Set cafile to empty string in confile file will turn off TLS negotiation