Ldap proxy access

otherwise username2dn cannot be accessed, for instance. req'd by non-core app.

@karlitschek @DeepDiver1975 @PVince81 or others, ty