cubicweb #1403335 gssapi auth for initial connection to ldap server only [open]

A customer requests being able to use kerberos (windows) auth against AD server for the inital bind only.

priorityimportant
typeenhancement
done in<not specified>
load0.300
load left0.300
closed by<not specified>