ha and openldap allowed!