correctly configure ldap and document key attributes