we need to define LDAP variables, even if empty