configurable ldap filter