more ldap password-related fixes