Fix posix base_dn and unlock activesupport version

This fixes ldap_fluff for posix (which was broken if a group_base was not supplied) and allows ldap_fluff to pick up any version it needs from Foreman, which will be 3.2.18 in 1.8.7, and the latest (4.1.1 as of now) if it's a more recent Ruby.