handle LDAP errors