Conditionals in LDAP