make LDAP usage clearer

put parts useful to sysadmin into relevant place - seems to be a common
requirement. have left the original docs in place in the ldap module.