KNOX-368: add support for new config param userSearchBase
KNOX-369: add support for new config param groupSearchBase
KNOX-371: group membership lookup need to use userdn computed by search