changing templates to use inetOrgPerson instead of account, and also fixing some
major security holes in ldap access permissions...
okay, this now works better...