authorization commented out in ldap-auth