openldap: cleanup