skeleton openldap role