Changes to default ldap configuration which were missed
Support 'children' scope