Ldap filters (rebased onto dev_4_4)



This is the same as gh-506 but rebased onto dev_4_4.

----

Added a section to the LDAP sysadmin documentation to advise how to use a compound filter. It is a sub-heading as it didn't seem to fall naturally into the Group section itself. Especially as it's also applicable to user config.