ldap: just asq for username after login