add script to transfer LDAP user/group IDs to local