Dynamically add ldap entries instead of filtering when not needed

And fix logic when we don't override the backing device for the imap
drbd configs.