support administrative subunits in ldap2fai.php