LDAP sync improvements