ldap queries rewriting