use WinAuth only when LDAP_URL is not yet provided