switch from ldap.open to ldap.initialize as .open is deprecated.
implemented SASL bind using ipa host keytab and removed embedded credentials.