better ldap sync