Allowed public base dn read and capture extra LDAP host configuration
Forced password changes to use replaceAttributes