user resolution using LDAP