Add `base_dn' directive to LDAP backend config
Clarify the new meaning of an ldap resource's `root_dn' directive
Make sure that we work only with arrays when handling LDAP groups
Make Dns::getSrvRecors being more generic

The `target' property of a returned service record is too specific and causes
other properties being ignored.
Add LDAP discovery pages

refs #7163