MDL-59734 auth_ldap: Fix role sync