validation before ldap lookup