pw not required for ldap