make work with our LDAP