Fixed #17414 - client-side TLS certificate didn't work in Google LDAP

[uberbrady]

The way we had been setting the 'use client-side TLS certificates' option in LDAP was kinda working, but wasn't actually performing the actions in the right order. That worked OK in some versions of PHP - very likely due to some of the other ldap_set_option() bugs that had existed in older PHP versions. But, now that those bugs are fixed, this incorrect way we had been setting the option seems to have stopped working in later PHP versions.

This change moves the ldap_set_option() statements before the ldap_connect() statement, which looks like what they actually want you to do.

If someone is running the older, buggy versions of the PHP LDAP code, I suspect this will still work correctly - as we do the whole 'setting LDAP options before connect' thing already in the TLS-certificate-validity-ignoring code.

I'm going to see if I can get some tests going to make sure this works before we get it merged over to 'master'.

Fixes #17414

[uberbrady]

I ran this on a test instance and it did seem to work. Probably want to still wait for another confirmation or two before we merge it though.

[viclou]

[FD-50814]