ldap: support per-domain LDAP params