add auth_ldap to vars and config