ssh-login: more ldap config