added rootdn for nslcd