We'd probably use some objective API to abstract out the LDAP keys and arrays.