user and group search uses auth (LDAP) functions to do the searching; fix a couple of bugs in this area