ldap.conf search order problem