notes for LDAP