Fix scope.
Allow to specify base DN for searching user DNs (Bug #12128).
[jan] Add configuration for searching user DNs in LDAP groups (Bug #12128).