LDAP: Allow automatically-provisioning a domain and range
    
    If we get a user who is a member of a domain we haven't seen
    before, add a domain entry (auto-assigning its slice).
    
    Since we don't know the domain's real name, we'll just save the
    domain SID string as the name as well.