user can't login via LDAP