KNOX-391-392: KnoxLdaRealm should use LdapName.equals for groupDn compare