use `@ldap_uri` instead