AD authentication over open ldap