user create/update: ldap first, db second