make sure ldap things get passed around properly