refs #5 changed the way to resolve user DNs and groups.

The way to resolve user DNs and groups can be switched using Extension modules.