LDAP Wizard: don't send ldap_tls change back to the interface as the element was removed, for it is detected fully automatically. Resolves an JS error and thus an ever-spinning spinner
LDAP: set default value for login filter to empty, otherwise the wizard signals completed configuration too early when it might be not correct, i.e. login won't work
LDAP: on testing configuration, set active property to true, otherwise inactive connections cannot be tested properly
LDAP Wizard: make sure auto-detected suggestions are really applied initially. Also make initial filter compilation and user counting robust against race conditions.
LDAP Wizard: return correct var
some equals are more equal than other equals
LDAP Wizard: don't generate filter when not allowed