LDAP: reset user/group-config association only after exists-check, may performance in some cases