encapsulating user lookup functions and getting more stuff from ldap