Support full DNs in LDAP group members

Split first using commas.  Assumes there's no ',' or '=' in the uid.

Bug 1165775 oo-admin-ctl-team does not parse uniqueMember LDAP ...