LDAP -- works at all