untested draft of LDAP implementation