Fix #189: don't remove users from nested product configurations

* Fix is to integrate umapi-client 2.5, which (by default) only enumerates direct group memberships when fetch info from the server.

Author: adobeDan

setup.py

@@ -43,7 +43,7 @@
           'pycrypto',
           'python-ldap==2.4.25',
           'PyYAML',
-          'umapi-client>=2.4.1',
+          'umapi-client>=2.5',
           'psutil',
           'keyring'
       ],