Fix LDAP on the fly creation. The User object doesn't have a :dn attribute.
Fixes #4918 and adds a test for the behavior.
Authored by: edavis10 2010-02-25
Parent: [r3484]
Child: [r3486]
