Compare restricted users case-insentively, in analogy to LDAP's comparisons