Generic LDAP controller works, TODO: admin group membership.