explicit ldap pam handling in pam::ldap