rhel 6 compliant + ldap profile restriction