LDAP: add hint about MS AD configuration