configurable user lookup for LDAP