Requires "attribute_option range=" in config.
No test script provided yet, since testing requires an actual AD server.