Add ldap option "follow_referrals". Fixes problem with newer AD servers.