LDAP ldapsearch filter: return uidNumber if person has sub ou=mail