all filtering is done via ldap search filters