Consider splitting apart LDAP into AD and openLDAP sources

[tlater-famedly]

The two implementations are quirky enough that we should probably just individually support them; We don't have much of a need for other hypothetical AD implementations anyway. This would also allow us to get rid of the attribute mapping mess, and simply hard-code to what those systems use in practice.