Fix ldap auth for function matches
Fix ldap auth for function matches

The expand_ldap_entries doesn't take into account that certain entries
may not actually be dicts, such as @runner, @wheel, @jobs, or even .*

saltstack/salt,saltstack/salt,saltstack/salt,saltstack/salt,saltstack/salt