s3:idmap_ldap: use filter range from idmap domain, not idmap_ldap_context