edit manifest to support ldap authorize