Added new ldap variables to ldap class.
Filter replaces domain_suffix and is a query string to filter results from an LDAP search
service account and password are intended as a zero-privileges bind user for lookups
If filter exists, create anded (&(*)(*)) search with base search for user's DN.