LDAP recovery question...