LDAP: Auto-detect support for the ldap match rule
    
    This patch extends the RootDSE lookup so that we will perform a
    second request to test whether the match rule syntax can be used.
    
    If both groups and initgroups are disabled in the configuration,
    this lookup request can be skipped.