LDAP_ENABLE flag, and account auth via LDAP