We need to support various LDAP installations with varying schemas, also we are adding support for loading groups from LDAP.

We need to ensure we have sufficient testing of various configurations - previous experiences of LDAP have demonstrated that whilst fixing an issue for one configuration it is very easy to create a regression for another one if there is insufficient test coverage.