Fixes #8241. The newer LDAP Group Sync feature to sync by
LDAP filter did not normalize (ultimately, downcase) the DNs
so membership comparison was not always happening correctly. This
resulted in members be re-added during each resync even if they
were already members. This caused unnecessary writes to the DB
and also reset the joined at/given access at date.