add new domain for managing the domainadmins.
no need to change LDAP permissions on the primary domain anymore.
fix a couple of things, in init script, but also for default user type when creating a new user