Fix: return non-empty value if trimming is not required

[pgbv]

Currently function returns an empty string if "cn=" or "ou=" trimming is not required.
This one-line PR fixes this behavior.

Checklist for Pull Requests

• Have you signed the Contributor License Agreement?

---

[CLAassistant]

All committers have signed the CLA.

[drakkan]

Hello,

thanks for this PR, can you please also add a test case here?

[pgbv]

Returned the check for an empty string back.
Should be correct now.

[drakkan]

Ok, thanks. Before merging and changing the previous behavior, I would like to better understand your use case and the attribute entry returned by your ldap server (is it Active Directory or something else?)

[pgbv]

Sure.
Basically we're trying to make the matching via static groups (instead of using dynamic groups based on the memberOf attribute).
In static groups the value of the attribute usually doesn't require any trimming and the entire value is used.

Would be nice to have a workaround for OpenLDAP servers without memberOf overlay enabled.

[drakkan]

This will take some time to ensure that the change does not break other use cases. Please be patient.

[pgbv]

Sure, no pressure ;)
Thanks for your work and a such fast reply.