posix: allow authenticating anywhere under the base_dn

bind_as will do a search using the provided filter (currently remaining hard-coded to UID) and then bind to the located DN.  This allows users to authenticate in environments where OUs under the base_dn contain the users, rather than the base_dn itself.