Support recursive queries against LDAP directories

The top domain of a company might be DC=example,DC=com, while a
sub-domain may be DC=asia,DC=example,DC=com.  Assuming all users
in the company will use Gerrit, but their accounts are in different
sub-domains, recursive search under DC=example,DC=com is required.
So ldap.accountScope can be set to subtree for this case.

Change-Id: I9c6f98148b00e7c3f1e197054efcb2899f370d74
Signed-off-by: Shawn O. Pearce <sop@google.com>
3 files changed