ldap changes