New code to use ldap_search() to find the user's DN.
Create new 'search_sub_ous' setting and admin field for it.