how to constructure ldap entry when user status is changed