adding some ldap logic for easier integration into kfs