mrp interface tweak
extended auth_ldap a little to cover our needs