Formatting
Allow NULL user object filter

If the DN of the user object can be constructed from attributes in the request, there's no need to apply a filter, and scope = base can be used.