log and ldap separate