LDAP user cleanup removes users that are part of included groups if the dn is empty

If the user has an empty dn and a valid uid, the cleanup job will wrongly remove the user even if he is part of the included groups.