flexible ldap configuration