Prevent LDAP filter returning all users if pam_filter is not set.
Fix default value of $nss_base_passwd variable.

This was broken in 0cb4057595d2 when the $nss_base_passwd and $scope
variables were combined.