ACL checks when modifying user-modifiable attributes as non-root user.

fix improper use of "fail_if_no_mapping" flag: fail in case of error, don't fail only if mapping is not present

further fixing of back-ldap config; added enum_to_verb call to ease mapping enumerations to strings...