Add a dereference option for ldap

This allows proper dereferencing of aliased objects in an LDAP tree.

Fixes Bug #1153786

Change-Id: Ia09a99b7bca1ab055eb0c6dfa34138beca15bff0