LDAP settings: add user-configurable filter.

This is useful to filter on a given nsRole for instance, so that
one gets only colleagues in his completion, not everyone with a LDAP
account including customers having access to some company services.

REVIEW: 123029