user specs
generalize ldap person search