ProxyAuth via slapd-ldap woes