BAZYNGO-802: handle missing LDAP entries gracefully