conform to the new LDAP standards (even if they’re no fun)