Make LDAP-Sync-Fields more flexible (multiple and/or static fields)

Improve Ldap-Sync by allowing to configure
* multiple fields which will be tried in sequence (first hit wins)
* static fields ("field"name starting with underscore, which is prohibited as
  ldap-attributeName)
* a combination of both (obviously static fields will always hit)