ldap.read.only.mode must be set to true