using -y option for ldapsearch