flexible  DN query in ldap plugin