make the ldap method private since it's only used internally