reuse the same ldap client for cert/kerberos authentication