added ldap support and additional rights from bradly