modify-ldap-group: Remove the need for getent

Clear an old TODO by not relying in getent anymore but rather do the
LDAP search ourselves. Perform some basic sanity checking on the result
and use the result to populate the membertoadd variable instead of
handcrafting it

Change-Id: Ia8ad240a30bde921047b9c77a86311db4c013635