Remove canonical_dn call for compatibility with MS LDAP servers

Using external AD mode