ldap not needed