[keycloak-user] LDAP username mapping from active directory fails