s4:ldap.py - split it up and move SAM related stuff to sam.py