ldap as key