clean up LDAP