add more detail comment
improved ldap filter
turned dn_lookup into ad_lookup

so that we can query other values from ad besides just dn