allow LDAP search string