optimal index for ldap