using ldap cn=… instead of uid=…
force minlenth in form