better ldap config