ONE_LEVEL: only search for users in the DN specified by user_dn. SUBTREE: search entire LDAP subtree.