Implements feature #3662, to let administrators configure default roles ...

...for AuthSourceLdap users which get assigned to them during their account creation
It looks like this chunk of code repeated below three times, should be a instance method of AuthSourceLdap and you can just call it from other places.