cleaning up ldap