checkpoint: setup_ldap