"g:gsa" source-subject-identifier not necessary nor allowed

The "g:gsa" source-subject-identifier should no longer be specified in the ldappc configuration.

The provisioning of member groups is now controlled by the provision-member-groups="true|false" configuration option.

<groups provision-member-groups="true|false" ...

Member groups are now looked by by their LDAP DN.