WIP: revisiting our LDAP script