This was my mistake because I didn't understand what I was doing, didn't have shared ldap creds, and didn't want to put my creds on an aws instance - see pull #19