LDAP: Permissions and bind dn