Do a sub search to find user for authentication rather than assuming a flat Users group dn