plain password in LDAP config