changed base ldap search to be more open