Enhancements required by EGroupware to support utf-8 and win2008r2

- support for utf-8 (and others supported by mbstring) internal encoding
- Win2008r2/Samba4 CN=Users container can now be specified
- Win2008r2 required creation order for users: 1. deactivated, 2. password added, 3. activated
- Win2008r2 password reset requires ldap_mod_replace